Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Enterprise Linux 8/weldr-client
Red Hat
· Package
37 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Incorrect parsing of IPv6 host literals in net/url
CVE-2026-25679 · GO-2026-4601
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
High
Fix reported
2026-10-16
HTTP/2 transport accepts malformed framing-related headers in net/http
CVE-2026-78660 · GO-2026-6610
golang.org/x/net
stdlib
Go
Red Hat
Medium
Fix reported
2026-10-16
HTTP/1 client connection desynchronization after CONNECT rejection in net/http
CVE-2026-56866 · GO-2026-6605
stdlib
OpenShift Developer Tools and Services/helm
Go
Red Hat
Medium
Fix reported
2026-10-16
HTTP/2 server crash due to HPACK encoder race in net/http
CVE-2026-97032 · GO-2026-6617
golang.org/x/net
stdlib
Go
Red Hat
Medium
Fix reported
2026-10-16
Double flow control refund on HTTP/2 server streams in net/http
CVE-2026-78663 · GO-2026-6612
golang.org/x/net
stdlib
Go
Red Hat
Medium
Fix reported
2026-10-16
HTTP/2 server memory exhaustion due to Trailer headers in net/http
CVE-2026-78659 · GO-2026-6603
golang.org/x/net
stdlib
Go
Red Hat
Medium
Fix reported
2026-10-16
HTTP/1 server connection desynchronization after 2xx CONNECT response in net/http
CVE-2026-94439 · GO-2026-6613
stdlib
OpenShift Developer Tools and Services/helm
Go
Red Hat
Medium
Fix reported
2026-10-16
Sensitive headers not cleared on cross-origin redirect in net/http
CVE-2025-4673 · GO-2025-3751
stdlib
Cryostat 4/cryostat/cryostat-storage-rhel9
Go
Red Hat
Medium
Fix reported
2026-10-14
Incorrect enforcement of email constraints in crypto/x509
CVE-2026-27137 · GO-2026-4599
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
High
Fix reported
2026-10-07
Unbounded allocation for old GNU sparse in archive/tar
CVE-2026-32288 · GO-2026-4869
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/redhat-user-workloads/assisted-installer-ds-main
Go
Red Hat
Medium
Fix reported
2026-10-07
Memory exhaustion in query parameter parsing in net/url
CVE-2025-61726 · GO-2026-4341
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
Go
Red Hat
High
Fix reported
2026-10-03
Arbitrary inputs are included in errors without any escaping in net/textproto
CVE-2026-42507 · GO-2026-5039
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
Fix reported
2026-10-03
Invoking Encrypted Client Hello privacy leak in crypto/tls
CVE-2026-42505 · GO-2026-5856
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
Fix reported
2026-10-03
Unbounded allocation when parsing GNU sparse map in archive/tar
CVE-2025-58183 · GO-2025-4014
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
Fix reported
2026-10-02
Unexpected session resumption in crypto/tls
CVE-2025-68121 · GO-2026-4337
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-29
HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net
CVE-2025-22870 · GHSA-QXP5-GWG8-XV66
Version ranges need review.
golang.org/x/net
stdlib
Go
Red Hat
Medium
Fix reported
2026-09-10
Excessive resource consumption when printing error string for host certificate validation in crypto/x509
CVE-2025-61729 · GO-2025-4155
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
Go
Red Hat
High
Fix reported
2026-08-14
Kratos has a Confused Deputy issue
CVE-2026-6993 · GHSA-JJ45-XVQ5-RHH9
Version ranges need review.
github.com/go-kratos/kratos/v2
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
No fix reported
2026-07-24
Quadratic complexity when parsing some invalid inputs in encoding/pem
CVE-2025-61723 · GO-2025-4009
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
Fix reported
2026-05-15
CrossOriginProtection insecure bypass patterns not limited to exact matches in net/http
CVE-2025-47910 · GO-2025-3955
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
Fix reported
2026-05-15
Previous
1
2
Next