Security
فارسی
All products

Multicluster Engine for Kubernetes/multicluster-engine/cloudevents-conductor-rhel9

Red Hat · Package
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is fullCVE-2026-81872 · GHSA-HJF4-FPHR-2H65Version ranges need review. go.opentelemetry.io/otel/sdk/logAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinningCVE-2026-81871 · GHSA-W34Q-CM8F-9C5XVersion ranges need review. go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpcAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/htmlCVE-2026-42502 · GO-2026-5027 golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream DecoderCVE-2026-89090 · GHSA-XMRV-PMRH-HHX2Version ranges need review. github.com/aws/aws-sdk-go-v2/aws/protocol/eventstreamgithub.com/aws/aws-sdk-go-v2/service/bedrockagentcore GoRed Hat Medium Fix reported
opentelemetry-go's baggage parsing no longer caps raw header lengthCVE-2026-41178 · GHSA-5WRP-CWCJ-Q835 go.opentelemetry.io/otel/baggagego.opentelemetry.io/otel/propagation GoRed Hat Medium Fix reported
Go Net HTML parser is vulnerable to denial of serviceCVE-2026-25680 · GHSA-5CV4-JP36-H3MWVersion ranges need review. golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
maestro: maestro: REST API write endpoints registered without authentication middlewareCVE-2026-71299 Multicluster Engine for Kubernetes/multicluster-engine/cloudevents-conductor-rhel9Multicluster Engine for Kubernetes/multicluster-engine/maestro-rhel9 Red Hat Medium No fix reported
maestro: SQL identifier injection via properties.* search filter and orderBy fieldCVE-2026-71298 Multicluster Engine for Kubernetes/multicluster-engine/cloudevents-conductor-rhel9Multicluster Engine for Kubernetes/multicluster-engine/maestro-rhel9 Red Hat Medium No fix reported
maestro: maestro: gRPC broker has no auth interceptor and client mTLS is optionalCVE-2026-71297 Multicluster Engine for Kubernetes/multicluster-engine/cloudevents-conductor-rhel9Multicluster Engine for Kubernetes/multicluster-engine/maestro-rhel9 Red Hat Medium No fix reported