RHSA-2026:95360: Important: Red Hat build of Cryostat security update

An update is now available for the Red Hat build of Cryostat 4 on RHEL 9.Security Fix(es): dompurify: Cross-site scripting vulnerability allows code execution (CVE-2026-49978) immutable-js: Denial of Service due to mishandling of large index values in List operations (CVE-2026-59879) qs: Denial of Service via improper validation in stringify function (CVE-2026-82417) golang.org/x/image/tiff: Denial of Service via invalid TIFF image (CVE-2026-46604) golang.org/x/image/vp8l: Denial of Service via excessive memory allocation (CVE-2026-46603) github.com/apache/thrift: Denial of Service via unbounded recursion in Go transports (CVE-2026-83663) github.com/apache/thrift: Denial of Service via improper handling of compressed data (CVE-2026-94637) github.com/apache/thrift: Arbitrary code execution via heap-based buffer overflow during frame compression (CVE-2026-91135) golang.org/x/crypto/ssh: Denial of Service due to integer overflow in SSH channel write (CVE-2026-39834) Golang html/template: Cross-Site Scripting via pathological input (CVE-2026-56858) Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862) Golang encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818) Golang net/http: golang.org/x/net/http2: Denial of Service via excessive HTTP/2 SETTINGS frames (CVE-2026-78669) go.mongodb.org/mongo-driver: MongoDB Go Driver: Data deletion via query-operator injection in GridFS file IDs (CVE-2026-88031) google.golang.org/grpc: Denial of Service via malformed RPC requests (CVE-2026-84445) brace-expansion: Denial of Service via stack exhaustion from crafted brace patterns (CVE-2026-102276) proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet (CVE-2026-90711) handlebars: JavaScript Injection via AST Type Confusion in compile (Program.blockParams) (CVE-2026-106446) handlebars: JavaScript Injection via Own Property Check Bypass (CVE-2026-106445) brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns (CVE-2026-102278) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.