Migration Toolkit for Applications 8/mta/mta-generic-external-provider-rhel9

Red Hat · Package

6 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
ip-address: Address6 builds a parse diagnostic proportional to the input with no length bound, allowing a single long string to stall or crash the processCVE-2026-101911 · GHSA-H3MG-XC3C-68PW	ip-address Cryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9	npmRed Hat	Medium	Fix reported	2026-09-30
Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/htmlCVE-2026-42502 · GO-2026-5027	golang.org/x/net Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9	GoRed Hat	Medium	Fix reported	2026-09-22
Go Net HTML parser is vulnerable to denial of serviceCVE-2026-25680 · GHSA-5CV4-JP36-H3MWVersion ranges need review.	golang.org/x/net Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9	GoRed Hat	Medium	Fix reported	2026-09-10
XPath: Boolean expression infinite loop leads to denial of service via CPU exhaustionCVE-2026-32287 · GHSA-65XW-VW82-R86XVersion ranges need review.	github.com/antchfx/xpath Compliance Operator/compliance/openshift-compliance-operator-bundle	GoRed Hat	High	Fix reported	2026-09-10
golang.org/x/net/html has a Quadratic Parsing Complexity issueCVE-2025-47911 · GHSA-W4GW-W5JQ-G9JH	golang.org/x/net/html golang.org/x/net	GoRed Hat	Medium	Fix reported	2026-09-10
http-cache-semantics: http-cache-semantics: Information disclosure via improper Vary header wildcard validationCVE-2026-93750	Confidential Compute Attestation/build-of-trustee/trustee-rhel9 Exploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9	Red Hat	Medium	No fix reported	Not recorded