Threats Tagged 'cve-2026-45820'

Red Hat has released a critical security advisory for Red Hat Ansible Automation Platform 2.7 Container Release addressing multiple security vulnerabilities. The update fixes several CVEs affecting the platform, which is used for enterprise IT automation. Users are advised to apply the update after ensuring all previous errata are applied. No specific affected versions are detailed in the advisory.

Red Hat has issued a security advisory for Red Hat Hardened Images including golang1.26 packages, addressing multiple vulnerabilities. The update provides new RPM packages for golang1.26 version 1.26.6-0.1.hum1 across various architectures. The advisory references several CVEs including CVE-2026-33818 and others. The update is classified as a security fix with high severity. No detailed technical information or exploitation details are provided in the advisory.

fflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync(). A crafted ZIP archive with a central directory entry declaring compressed_size=0xFFFFFFFF (ZIP64 sentinel) but missing the required ZIP64 extra field tag 0x0001 causes z64e() to loop indefinitely due to out-of-bounds reads returning undefined, which coerces to 0, keeping the loop condition permanently true.