Threats Tagged 'cve-2026-82562'

Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, including an update to the grafana13.2 package (version 13.2.1-0.1.hum1) for aarch64 and x86_64 architectures. This update addresses multiple security vulnerabilities identified by several CVEs. The advisory provides updated RPMs to fix these issues and enhance security. No specific exploit details or active exploitation in the wild have been reported. The update is available and should be applied to affected systems.

CVE-2026-82562 is a resource allocation vulnerability in the ljharb qs library versions 6.14.2 through before 6.16.0. When parsing query strings with options comma: true and throwOnLimitExceeded: true, a specially crafted parameter using the bracket-push key form (e.g., a[]=1,2,3,4) bypasses the configured array size limit, causing the parser to allocate an arbitrarily large inner array. This occurs because the limit check does not apply correctly to bracket-push keys, allowing linear resource exhaustion proportional to input size. The issue was fixed in version 6.16.0 by correcting the limit enforcement logic.

Red Hat has issued a security advisory for Red Hat Hardened Images RPMs, specifically addressing multiple vulnerabilities in the grafana12.4 and grafana13.1 packages. The update includes fixes for several CVEs, including CVE-2026-73501 and others, affecting versions up to 12.4.9-0.4.hum1 and 13.1.3-0.2.hum1. These vulnerabilities are rated as high severity. The advisory provides updated RPM packages to remediate these issues.