Security
فارسی
All products

Red Hat Ceph Storage 9/thrift

Red Hat · Package
48 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Distrust compromised intermediate certificates in crypto/x509CVE-2026-111943 · GO-2026-6809 rustls-webpkiwebpki-root-certs Rust / CargoGoRed Hat High Fix reported
Google Guava: CompactHashMap/CompactHashSet/MapMakerInternalMap deserialization triggers uncontrolled memory allocationCVE-2026-102554 · GHSA-XXPH-C9WW-HJ94 com.google.guava:guavaExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 MavenRed Hat High Fix reported
markdown-it: Quadratic-time rendering of a single multi-line link reference definition with default options (regression since 14.0)CVE-2026-111758 · GHSA-GFR2-RV44-R23C markdown-itRed Hat Build of Podman Desktop/rh-podman-desktop npmRed Hat High Fix reported
markdown-it: Quadratic-time denial of service in inline HTML parsing with html enabledCVE-2026-111766 · GHSA-VFGH-JCMW-G37Q markdown-itRed Hat Build of Podman Desktop/rh-podman-desktop npmRed Hat Low Fix reported
markdown-it: Quadratic complexity in smartquotes with unmatched closing quotesCVE-2026-111759 · GHSA-R7FV-28H4-CVQ7 markdown-itRed Hat Build of Podman Desktop/rh-podman-desktop npmRed Hat High Fix reported
Enforce maximum recursion depth in encoding/asn1CVE-2026-33818 · GO-2026-5972 stdlibAWS Load Balancer Operator/albo/aws-load-balancer-operator GoRed Hat High Fix reported
Limit handshake messages we are willing to accept post-handshake in crypto/tlsCVE-2026-56862 · GO-2026-6090 stdlibAWS Load Balancer Operator/albo/aws-load-balancer-operator GoRed Hat High Fix reported
Avoid quadratic complexity in resolvePath in net/urlCVE-2026-56860 · GO-2026-6218 stdlibAWS Load Balancer Operator/albo/aws-load-balancer-operator GoRed Hat High Fix reported
HTTP/2 transport accepts malformed framing-related headers in net/httpCVE-2026-78660 · GO-2026-6610 golang.org/x/netstdlib GoRed Hat Medium Fix reported
HTTP/1 client connection desynchronization after CONNECT rejection in net/httpCVE-2026-56866 · GO-2026-6605 stdlibOpenShift Developer Tools and Services/helm GoRed Hat Medium Fix reported
HTTP/2 server crash due to HPACK encoder race in net/httpCVE-2026-97032 · GO-2026-6617 golang.org/x/netstdlib GoRed Hat Medium Fix reported
Memory limit bypass when parsing MIME headers in net/textproto, mime/multipartCVE-2026-94440 · GO-2026-6608 stdlibOpenShift Developer Tools and Services/helm GoRed Hat Medium Fix reported
Double flow control refund on HTTP/2 server streams in net/httpCVE-2026-78663 · GO-2026-6612 golang.org/x/netstdlib GoRed Hat Medium Fix reported
Lack of limit on size of parsed Range headers in net/httpCVE-2026-78667 · GO-2026-6609 stdlibExploit Intelligence/exploit-intelligence/agent-client-rhel9 GoRed Hat High Fix reported
HTTP/1 server connection desynchronization after 2xx CONNECT response in net/httpCVE-2026-94439 · GO-2026-6613 stdlibOpenShift Developer Tools and Services/helm GoRed Hat Medium Fix reported
Reject malformed ECH outer extension references in crypto/tlsCVE-2026-97031 · GO-2026-6607 stdlibExploit Intelligence/exploit-intelligence/exploit-intelligence-operator-controller-rhel9 GoRed Hat High Fix reported
Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/httpCVE-2026-56853 · GO-2026-6089 stdlibAWS Load Balancer Operator/albo/aws-load-balancer-operator GoRed Hat High Fix reported
linkify-it: Quadratic-complexity DoS via the `mailto:` validator scan-loop on attacker textCVE-2026-59887 · GHSA-V245-V573-V5VM linkify-itNode HealthCheck Operator/workload-availability/node-healthcheck-must-gather-rhel9 npmRed Hat High Fix reported
markdown-it: Quadratic complexity DoS in smartquotes rule via replaceAt string operationsCVE-2026-48988 · GHSA-6V5V-WF23-FMFQ markdown-itRed Hat Build of Podman Desktop/rh-podman-desktop.git npmRed Hat Medium Fix reported
TaffyDB can allow access to any data items in the DBCVE-2019-10790 · GHSA-MXHP-79QH-MCX6 taffytaffydb npmRed Hat High No fix reported