Security Bulletin: Vulnerabilities in golang.org/x/crypto bundled with IBM Fusion and IBM Fusion HCI.

Summary IBM Fusion and IBM Fusion HCI include the golang.org/x/crypto library, which is affected by multiple vulnerabilities, including denial of service and improper authorization vulnerabilities. CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832,...

Security Bulletin: Vulnerability in golang.org/x/mod bundled with IBM Fusion and IBM Fusion HCI

Summary IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging include the golang.org/x/mod library, which is affected by multiple vulnerabilities, including Improper verification of cryptographic signatures and integrity verification bypass. CVE-2026-56864, CVE-2026-56865. Vulnerability...

Security Bulletin: Vulnerability in bleach bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging.

Summary IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging include the bleach library, which is affected by a improper input validation vulnerability. CVE-2025-0938. Vulnerability Details CVEID:CVE-2025-0938 DESCRIPTION: The Python standard library functions urllib.parse.urlsplit and...

Security Bulletin: Vulnerability in pyasn1 bundled with IBM Fusion and IBM Fusion HCI.

Summary IBM Fusion and IBM Fusion HCI include the pyasn1 library, which is affected by a denial of service vulnerability. CVE-2026-59884, CVE-2026-59885, CVE-2026-59886. Vulnerability Details CVEID:CVE-2026-59884 DESCRIPTION: pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER...

Security Bulletin: Vulnerability in socket.io-parser bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging.

Summary IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging include the socket.io-parser library, which is affected by a denial of service vulnerability. CVE-2026-69185. Vulnerability Details CVEID:CVE-2026-69185 DESCRIPTION: Socket.IO enables bidirectional and low-latency communication fo...

Security Bulletin: Vulnerability in fast-uri bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging.

Summary IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging include the fast-uri library, which is affected by an improper input validation vulnerability. CVE-2026-13676, CVE-2026-16221, CVE-2026-18446 Vulnerability Details CVEID:CVE-2026-13676 DESCRIPTION: fast-uri versions 2.3.1 through...

Security Bulletin: Vulnerability in axios bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging.

Summary IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging include the axios library, which is affected by multiple vulnerabilities, including server-side request forgery, prototype pollution, and denial of service vulnerabilities. CVE-2026-44486, CVE-2026-44487, CVE-2026-44488,...

Security Bulletin: Vulnerability in linkify-it bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging.

Summary IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging include the linkify-it library, which is affected by a denial of service vulnerability. CVE-2026-59887, CVE-2026-48801. Vulnerability Details CVEID:CVE-2026-59887 DESCRIPTION: linkify-it is a links recognition library with full...

Security Bulletin: Vulnerability in golang.org/x/text bundled with IBM Fusion and IBM Fusion HCI.

Summary IBM Fusion and IBM Fusion HCI include the golang.org/x/text library, which is affected by a denial of service vulnerability. CVE-2026-56852. Vulnerability Details CVEID:CVE-2026-56852 DESCRIPTION: A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes...

Security Bulletin: Vulnerability in aiohttp bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Content-Aware Storage.

Summary IBM Fusion, IBM Fusion HCI, and IBM Fusion Content-Aware Storage include the aiohttp library, which is affected by multiple vulnerabilities, including HTTP request smuggling and out-of-bounds read vulnerabilities. CVE-2026-69243, CVE-2026-69244. Vulnerability Details CVEID:CVE-2026-69243...

Security Bulletin: Vulnerability in bcprov-jdk18on bundled with IBM Fusion and IBM Fusion HCI.

Summary IBM Fusion and IBM Fusion HCI include the bcprov-jdk18on library, which is affected by multiple vulnerabilities, including improper certificate validation, improper validation of integrity check value, and denial of service vulnerabilities. CVE-2026-12185, CVE-2026-12803, CVE-2026-12816,...

Astra Linux – Vulnerability in Ceph

IBM Spectrum Fusion HCI versions 2.5.2 through 2.7.2 may allow attackers to perform unauthorized actions in the RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807...

Security Bulletin: Vulnerability in go-chi/chi bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging.

Summary IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging include the go-chi/chi library, which is affected by a denial of service vulnerability. CVE-2025-69725. Vulnerability Details CVEID:CVE-2025-69725 DESCRIPTION: An Open Redirect vulnerability in the go-chi/chi =5.2.2 RedirectSlashe...

Security Bulletin: Vulnerability in tritonclient bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Content-Aware Storage.

Summary IBM Fusion, IBM Fusion HCI, and IBM Fusion Content-Aware Storage include the tritonclient library, which is affected by a denial of service vulnerability. CVE-2025-33202. Vulnerability Details CVEID:CVE-2025-33202 DESCRIPTION: NVIDIA Triton Inference Server for Linux and Windows contains ...

Security Bulletin: Vulnerability in SVGO bundled with IBM Fusion and IBM Fusion HCI, and IBM Fusion Content-Aware Storage

Summary IBM Fusion, IBM Fusion HCI, and IBM Fusion Content-Aware Storage include the SVGO library, which is affected by an XML entity expansion vulnerability. CVE-2026-29074 Vulnerability Details CVEID:CVE-2026-29074 DESCRIPTION: SVGO, short for SVG Optimizer, is a Node.js library and command-lin...

Security Bulletin: Vulnerability in Flask-HTTPAuth bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging

Summary IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging include the Flask-HTTPAuth library, which is affected by an improper authentication vulnerability. CVE-2026-34531 Vulnerability Details CVEID:CVE-2026-34531 DESCRIPTION: Flask-HTTPAuth provides Basic, Digest and Token HTTP...

Security Bulletin: Vulnerability in serialize-javascript bundled with IBM Fusion, IBM Fusion HCI and IBM Fusion Data Cataloging

Summary IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging include the serialize-javascript library, which is affected by a denial of service vulnerability. CVE-2026-34043 Vulnerability Details CVEID:CVE-2026-34043 DESCRIPTION: Serialize JavaScript to a superset of JSON that includes...

Security Bulletin: Vulnerability in fast-uri bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging

Summary IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging include the fast-uri library, which is affected by a path traversal vulnerability. CVE-2026-6321 Vulnerability Details CVEID:CVE-2026-6321 DESCRIPTION: fast-uri decoded percent-encoded path separators and dot segments before...

Security Bulletin: Vulnerability in lxml bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging

Summary IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging include the lxml library, which is affected by an XML External Entity XXE vulnerability. CVE-2026-41066 Vulnerability Details CVEID:CVE-2026-41066 DESCRIPTION: lxml is a library for processing XML and HTML in the Python language...

Security Bulletin: Vulnerability in path-to-regexp bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging

Summary IBM Fusion, IBM Fusion HCI, and IBM Fusion Data Cataloging include the path-to-regexp library, which is affected by a regular expression denial of service ReDoS vulnerability. CVE-2026-4867 Vulnerability Details CVEID:CVE-2026-4867 DESCRIPTION: Impact: A bad regular expression is generate...