VDB
RHSA-2026:62115
RHSA-2026:62115
PUBLISHED
CVSS 7.099999904632568 HIGH
taffydb npm module, vulnerable in all versions up to and including 2.7.3, allows attackers to forge adding additional properties into user-input processed by taffy which can allow access to any data items in the DB. taffy sets an internal index for each data item in its DB. However, it is found that the internal index can be forged by adding additional properties into user-input. If index is found in the query, taffyDB will ignore other query conditions and directly return the indexed data item. Moreover, the internal index is in an easily-guessable format (e.g., T000002R000001). As such, attackers can use this vulnerability to access any data items in the DB.
Risk Scores
CVSS 3.1
7.099999904632568
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:3c1bbf300b5bd123493c57ffe84ca24bf14fcf32b648cc8c279ad3a3101c19c8_ppc64le as a component of Red Hat Ceph Storage 8.1 | *, *, * |
| Red Hat | registry.redhat.io/rhceph/keepalived-rhel9@sha256:cbd32c0b082f368583eeff3657a97a79a11ccb5d3bcf5663dd8738d09a0d53e8_s390x as a component of Red Hat Ceph Storage 8.1 | *, *, * |
| Red Hat | registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:db068d24b3055fe96d2fa8703405eca07634238306159e3803ff4ae23f1024fd_arm64 as a component of Red Hat Ceph Storage 8.1 | *, *, * |
| Red Hat | registry.redhat.io/rhceph/grafana-rhel9@sha256:9b426d409203a3366689db14f15b0d8639d231945678184c3b43869d56705dbd_ppc64le as a component of Red Hat Ceph Storage 8.1 | *, *, * |
| Red Hat | registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:070f43995aae0152eac7d228ae7d4d005eb57e06e14aef1b50d4db64341b826a_arm64 as a component of Red Hat Ceph Storage 8.1 | *, *, * |
| Red Hat | registry.redhat.io/rhceph/grafana-rhel9@sha256:bbb4f2499a816032af66bb8b022d8a51198a5db01ee39714800340cbd4a45d40_s390x as a component of Red Hat Ceph Storage 8.1 | *, *, * |
| Red Hat | registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:63eed84d24f949baf09d2294dcc9849e72a6cbe6213844872efb9843898a132f_s390x as a component of Red Hat Ceph Storage 8.1 | *, *, * |
| Red Hat | registry.redhat.io/rhceph/grafana-rhel9@sha256:044d55095e592d054a5ec69603c1fd8886ea3efcedfd95945dbef3596c9835d5_arm64 as a component of Red Hat Ceph Storage 8.1 | *, *, * |
| Red Hat | registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:de99e5235ccf7714e7df2ef04b8c5c60c3efe04cacee13acfbaddaa60c5f88bf_amd64 as a component of Red Hat Ceph Storage 8.1 | *, *, * |
| Red Hat | registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:79bd982b6824100b974103347eaaa7f34c60f4b1118c93d7e628bafb11945a17_arm64 as a component of Red Hat Ceph Storage 8.1 | *, *, * |
| Red Hat | registry.redhat.io/rhceph/keepalived-rhel9@sha256:8aac763313e46322e3d0fbb3fbed767228906f75865d54eb753f03f027408926_arm64 as a component of Red Hat Ceph Storage 8.1 | *, *, * |
| Red Hat | registry.redhat.io/rhceph/rhceph-8-rhel9@sha256:6c084d7b7609111b8c28d22a7e69d2093607e9a648b7fb7259bcf5693ca35875_amd64 as a component of Red Hat Ceph Storage 8.1 | *, *, * |
| Red Hat | registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:4493b44fc1a487413d554826a92f82a44aca453e8c5d9c476ed47ef3efc1123a_ppc64le as a component of Red Hat Ceph Storage 8.1 | *, *, * |
| Red Hat | registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:86d8a15cc12eaf34d01d077924301ee0276bc2b9539987b1133dc9b65609d660_s390x as a component of Red Hat Ceph Storage 8.1 | *, *, * |
| Red Hat | registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:b0ba95a2611c37db8f149d5fe44f424f3ff696535f7e5ac5cbadd45837f864cb_amd64 as a component of Red Hat Ceph Storage 8.1 | *, *, * |
| Red Hat | registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:ed001e7318e45d7c0372b966a8c447eddf75d1079b1b937872c2c12893389849_arm64 as a component of Red Hat Ceph Storage 8.1 | *, *, * |
| Red Hat | registry.redhat.io/rhceph/keepalived-rhel9@sha256:3d2d10adc4f85192a3729477777b068366b5178512724d3ffd6c498ba577d847_amd64 as a component of Red Hat Ceph Storage 8.1 | *, *, * |
| Red Hat | registry.redhat.io/rhceph/oauth2-proxy-rhel9@sha256:3d4665881548c0808fea1612a972c732c5f2b928ad49fbb8025ceb7f410faabb_amd64 as a component of Red Hat Ceph Storage 8.1 | *, *, * |
| Red Hat | registry.redhat.io/rhceph/keepalived-rhel9@sha256:39cf934468566964e44ddac65928d837528d126d16d5ad6d71298c0570b0066d_ppc64le as a component of Red Hat Ceph Storage 8.1 | *, *, * |
| Red Hat | registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:b48486f663889cd57eead6f097d6cc26e6c2ff9bdfbb6f24b8d1f8d2e42a2b4c_arm64 as a component of Red Hat Ceph Storage 8.1 | *, *, * |
…and 8 more
Timeline
- Sep 1, 2026 CVE Published
- Oct 3, 2026 CVE Updated
- Oct 3, 2026 Distribution Patch
- Oct 3, 2026 Distribution Patch
- Oct 3, 2026 Security Advisory
- Oct 3, 2026 Security Advisory
- Oct 3, 2026 Security Advisory
- Oct 3, 2026 Security Advisory
- Oct 3, 2026 Security Advisory
- Oct 3, 2026 Security Advisory
- Oct 3, 2026 Security Advisory
- Oct 3, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:62115 advisory
- https://access.redhat.com/security/cve/CVE-2019-10790 advisory
- https://access.redhat.com/security/cve/CVE-2023-25153 advisory
- https://access.redhat.com/security/cve/CVE-2023-28155 advisory
- https://access.redhat.com/security/cve/CVE-2024-11831 advisory
- https://access.redhat.com/security/cve/CVE-2025-50181 advisory
- https://access.redhat.com/security/cve/CVE-2025-50182 advisory
- https://access.redhat.com/security/cve/CVE-2025-59436 advisory
- https://access.redhat.com/security/cve/CVE-2025-66418 advisory
- https://access.redhat.com/security/cve/CVE-2026-24049 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://docs.redhat.com/en/documentation/red_hat_ceph_storage/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_62115.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2389970 issue
- https://www.cve.org/CVERecord?id=CVE-2019-10790 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2019-10790 advisory
- https://security.snyk.io/vuln/SNYK-JS-TAFFYDB-2992450 advisory
- https://snyk.io/vuln/SNYK-JS-TAFFY-546521 advisory
- https://www.npmjs.com/package/taffy advisory
- https://www.usenix.org/system/files/sec21-xiao.pdf advisory
…and 41 more