CERT24RHSA-2026:8568 — Red Hat Security Advisory: New container image: rhceph-9.0Loading data…
CERT24Threat Observatory
Period

RHSA-2026:8568 — Red Hat Security Advisory: New container image: rhceph-9.0

The source describes a flaw in the npm-serialize-javascript module that may allow malicious code injection and XSS attacks when data is deserialized by a web browser. It also describes a potential SSRF vector in the node ip package because the value 0 is incorrectly categorized as globally routable by the isPublic function.

← Back to intelligence

RHSA-2026:8568 — Red Hat Security Advisory: New container image: rhceph-9.0

The source describes a flaw in the npm-serialize-javascript module that may allow malicious code injection and XSS attacks when data is deserialized by a web browser. It also describes a potential SSRF vector in the node ip package because the value 0 is incorrectly categorized as globally routable by the isPublic function.