Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/observatorium-rhel9
Red Hat
· Package
12 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
chi Has an IP Spoofing Vulnerability in `middleware.RealIP`
CVE-2026-72815 · GHSA-3FXJ-6JH8-HVHX
Version ranges need review.
github.com/go-chi/chi/v5/middleware
github.com/go-chi/chi/v5
Go
Red Hat
Medium
Fix reported
2026-11-04
chi: Client IP spoofing in ClientIPFromXFF via X-Forwarded-For
CVE-2026-114437 · GHSA-J6QF-3M9C-VWJ3
github.com/go-chi/chi/v5
Logging Subsystem for Red Hat OpenShift/openshift-logging/opa-openshift-rhel9
Go
Red Hat
Medium
Fix reported
2026-10-24
Enforce maximum recursion depth in encoding/asn1
CVE-2026-33818 · GO-2026-5972
stdlib
AWS Load Balancer Operator/albo/aws-load-balancer-operator
Go
Red Hat
High
Fix reported
2026-10-20
Memory exhaustion in query parameter parsing in net/url
CVE-2025-61726 · GO-2026-4341
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
Go
Red Hat
High
Fix reported
2026-10-03
chi's RealIP Middleware allows IP spoofing via unvalidated X-Forwarded-For header
CVE-2026-72816 · GHSA-RJR7-JGGH-PGCP
github.com/go-chi/chi/middleware
github.com/go-chi/chi/v2/middleware
Go
Red Hat
High
Fix reported
2026-09-10
chi Middleware Vulnerable to Potential IP Spoofing via `X-Forwarded-For` Header in `Request.RemoteAddr` Resolution
CVE-2026-72817 · GHSA-9G5Q-2W5X-HMXF
github.com/go-chi/chi/middleware
github.com/go-chi/chi/v2/middleware
Go
Red Hat
High
Fix reported
2026-09-10
chi has an open redirect vulnerability in the RedirectSlashes middleware
CVE-2025-69725 · GHSA-MQQF-5WVP-8FH8
Version ranges need review.
github.com/go-chi/chi/v2
github.com/go-chi/chi/v3
Go
Red Hat
Medium
Fix reported
2026-09-10
etcd: Watch API authorization bypass via open-ended range requests
CVE-2026-73499 · GHSA-XG4H-6GFC-H4M8
go.etcd.io/etcd/server/v3
go.etcd.io/etcd/v3
Go
Red Hat
High
Fix reported
2026-08-20
Excessive resource consumption when printing error string for host certificate validation in crypto/x509
CVE-2025-61729 · GO-2025-4155
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
Go
Red Hat
High
Fix reported
2026-08-14
nats-server websockets are vulnerable to pre-auth memory DoS
CVE-2026-27571 · GHSA-QRVQ-68C2-7GRW
Version ranges need review.
github.com/nats-io/nats-server/v2
github.com/nats-io/nats-server
Go
Red Hat
Medium
Fix reported
2026-03-02
github.com/go-chi/chi: chi: Authentication bypass via SuppressNotFound middleware
CVE-2026-118681
Logging Subsystem for Red Hat OpenShift/openshift-logging/opa-openshift-rhel9
Multicluster Engine for Kubernetes/multicluster-engine/managedcluster-import-controller-rhel9
Red Hat
Low
No fix reported
Not recorded
github.com/grpc-ecosystem/grpc-gateway: github.com/grpc-ecosystem/grpc-gateway/v2: grpc-gateway: Access control bypass via X-HTTP-Method-Override header
CVE-2026-37236
Multicluster Global Hub/multicluster-globalhub/multicluster-globalhub-grafana-rhel9
OpenShift Serverless/openshift-serverless-1/kn-plugin-event-sender-rhel9
Red Hat
Medium
No fix reported
Not recorded
