Node qs: Summary qs.stringify throws a TypeError when it serializes an object whose own constructor property has a truthy, non-callable isBuffer member. (CVE-2026-82417)
Description
Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, including an update to the grafana13.2 package (version 13.2.1-0.1.hum1) for aarch64 and x86_64 architectures. This update addresses multiple security vulnerabilities identified by several CVEs. The advisory provides updated RPMs to fix these issues and enhance security. No specific exploit details or active exploitation in the wild have been reported. The update is available and should be applied to affected systems.
CVSS v3.1
Score 5.3medium
Affected software
pkg:deb/ubuntu/node-qs?arch=source&distro=esm-infra-legacy/trustypkg:deb/ubuntu/node-qs?arch=source&distro=xenialpkg:deb/ubuntu/node-qs?arch=source&distro=bionicpkg:deb/ubuntu/node-qs?arch=source&distro=esm-apps/focalpkg:deb/ubuntu/node-qs?arch=source&distro=jammypkg:deb/ubuntu/node-qs?arch=source&distro=noblepkg:deb/ubuntu/node-qs?arch=source&distro=stonkingpkg:deb/ubuntu/node-qs?arch=source&distro=resoluteRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This advisory covers a security update for Red Hat Hardened Images RPMs, specifically the grafana13.2 package version 13.2.1-0.1.hum1 for aarch64 and x86_64 architectures. The update addresses multiple CVEs including CVE-2026-82417 and others related to various weaknesses (CWE-1287, CWE-770, CWE-79, CWE-639, CWE-835). The advisory references Red Hat's official errata RHSA-2026:63164 and provides updated RPMs to remediate these vulnerabilities. No CVSS score is provided, and no known exploits in the wild have been reported.
Potential Impact
The vulnerabilities addressed by this update are rated high severity by Red Hat. They affect the Red Hat Hardened Images RPMs, including the grafana13.2 package, potentially allowing security issues if left unpatched. The exact impact details are not specified in the advisory, but the presence of multiple CWEs indicates risks such as improper input validation, resource management, and potential security bypasses.
Mitigation Recommendations
A fix is available via the updated RPMs for grafana13.2 version 13.2.1-0.1.hum1 for aarch64 and x86_64 architectures. Users should apply this update as detailed in the Red Hat advisory RHSA-2026:63164. No additional mitigation steps are specified or required beyond applying the official update.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2026:63164
- Cve Count
- 2
- Additional Cves
- ["CVE-2026-82562"]
- State
- PUBLISHED
Threat ID: 6a9ad4ecacd9273b49b677af
Added to database: 09/04/2026, 14:25:48 UTC
Last enriched: 10/02/2026, 18:29:29 UTC
Last updated: 10/17/2026, 22:19:01 UTC
Views: 61
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.