Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Hardened Images/tempo2.10
Red Hat
· Package
4 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
OpenTelemetry-Go: Eager W3C baggage-property materialization causes bounded memory-allocation amplification
CVE-2026-128086 · GHSA-RRFC-GJM9-CGRJ
go.opentelemetry.io/otel/baggage
go.opentelemetry.io/otel/propagation
Go
Red Hat
Medium
Fix reported
2026-11-13
opentelemetry-go: AttributeValueLengthLimit is fully bypassed by attribute values composed of valid U+FFFD runes
CVE-2026-128085 · GHSA-Q7GW-24FR-5P69
go.opentelemetry.io/otel/sdk/log
go.opentelemetry.io/otel/sdk
Go
Red Hat
Medium
Fix reported
2026-11-13
github.com/mark3labs/mcp-go: mcp-go: Unauthorized access via improper OAuth metadata validation
CVE-2026-123272
Red Hat Connectivity Link 1/rhcl-tech-preview/mcp-gateway-rhel9-operator
Red Hat Connectivity Link 1/rhcl-tech-preview/mcp-gateway-rhel9
Red Hat
High
No fix reported
Not recorded
github.com/mark3labs/mcp-go: mcp-go: Denial of Service via unbounded HTTP request body buffering
CVE-2026-108859
Red Hat Hardened Images/tempo2.10
Red Hat Hardened Images/tempo3.0
Red Hat
High
No fix reported
Not recorded
