The advisory covers a set of security issues in Red Hat Hardened Images RPMs, notably including CVE-2026-84375, a denial of service vulnerability in the js-yaml parser. This vulnerability arises when the parser processes merge keys with empty sources in YAML documents, causing an infinite loop and excessive CPU usage. The advisory lists updated RPMs for grafana13.1 (version 13.1.3-0.5.hum1) for aarch64 and x86_64 architectures as the fix. Red Hat classifies the severity as high and provides detailed references and patches through their official channels. No known exploits in the wild are reported.

Exploitation of CVE-2026-84375 can cause denial of service by consuming excessive CPU resources when processing malicious YAML input. This can degrade or halt application functionality that relies on js-yaml for YAML parsing. Other included CVEs in the advisory may have varying impacts, but the DoS impact is explicitly described and rated high.

Red Hat has released updated RPM packages (grafana13.1-13.1.3-0.5.hum1) that address these vulnerabilities. Users should apply these official updates as provided by Red Hat to remediate the issues. No additional mitigations are specified or required beyond applying the vendor-supplied fixes.