RHSA-2026:52768 | Vulnetix

RHSA-2026:52768 PUBLISHED CVSS 8.100000381469727 HIGH

A flaw was found in multer. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by initiating and then aborting or sending malformed multipart uploads. This action leaves orphaned partial files on the disk, which can lead to the exhaustion of available disk space without requiring any specific application bug.

Risk Scores

CVSS 3.1

8.100000381469727

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Affected Products

Vendor	Product	Versions
Red Hat	registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:7f831e5f23c8ea87704e9cdacd5669e83b075243e048d4c797e3a1bb14569840_amd64 as a component of Red Hat Developer Hub 1.9	*
Red Hat	registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:bb8c0beabdebee8c0bebdab9af6931f6ff2d3a7e063c6c76841463ec9fb66491_amd64 as a component of Red Hat Developer Hub 1.9	*
Red Hat	registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:c7a8301849b2b5833207b7cb1c2cdd05e93d303e92636d8ca2932b4c2ea23c5c_amd64 as a component of Red Hat Developer Hub 1.9	*

Timeline

Aug 10, 2026 CVE Published
Sep 18, 2026 CVE Updated
Sep 18, 2026 Distribution Patch
Sep 18, 2026 Distribution Patch
Sep 18, 2026 Security Advisory
Sep 18, 2026 Security Advisory
Sep 18, 2026 Security Advisory
Sep 18, 2026 Security Advisory
Sep 18, 2026 Security Advisory
Sep 18, 2026 Security Advisory
Sep 18, 2026 Security Advisory
Sep 18, 2026 Security Advisory

References

https://access.redhat.com/errata/RHSA-2026:52768 advisory
https://access.redhat.com/security/cve/CVE-2026-13149 advisory
https://access.redhat.com/security/cve/CVE-2026-46625 advisory
https://access.redhat.com/security/cve/CVE-2026-48068 advisory
https://access.redhat.com/security/cve/CVE-2026-48069 advisory
https://access.redhat.com/security/cve/CVE-2026-48712 advisory
https://access.redhat.com/security/cve/CVE-2026-49978 advisory
https://access.redhat.com/security/cve/CVE-2026-5038 advisory
https://access.redhat.com/security/cve/CVE-2026-5079 advisory
https://access.redhat.com/security/cve/CVE-2026-59869 advisory
https://access.redhat.com/security/cve/CVE-2026-59877 advisory
https://access.redhat.com/security/cve/CVE-2026-59892 advisory
https://access.redhat.com/security/updates/classification/ advisory
https://catalog.redhat.com/search?gs&searchType=containers&q=rhdh advisory
https://developers.redhat.com/rhdh/overview advisory
https://docs.redhat.com/en/documentation/red_hat_developer_hub advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_52768.json advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2488935 issue
https://www.cve.org/CVERecord?id=CVE-2026-5038 advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-5038 advisory

…and 58 more

Open in Interactive Console →