Security
فارسی
All products

Red Hat Connectivity Link 1/rhcl-tech-preview/mcp-gateway-rhel9-operator

Red Hat · Package
7 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Enforce maximum recursion depth in encoding/asn1CVE-2026-33818 · GO-2026-5972 stdlibAWS Load Balancer Operator/albo/aws-load-balancer-operator GoRed Hat High Fix reported
Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/netCVE-2026-33814 · GO-2026-4918 golang.org/x/netstdlib GoRed Hat High Fix reported
OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is fullCVE-2026-81872 · GHSA-HJF4-FPHR-2H65Version ranges need review. go.opentelemetry.io/otel/sdk/logAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinningCVE-2026-81871 · GHSA-W34Q-CM8F-9C5XVersion ranges need review. go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpcAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
opentelemetry-go's baggage parsing no longer caps raw header lengthCVE-2026-41178 · GHSA-5WRP-CWCJ-Q835 go.opentelemetry.io/otel/baggagego.opentelemetry.io/otel/propagation GoRed Hat Medium Fix reported
github.com/mark3labs/mcp-go: mcp-go: Unauthorized access via improper OAuth metadata validationCVE-2026-123272 Red Hat Connectivity Link 1/rhcl-tech-preview/mcp-gateway-rhel9-operatorRed Hat Connectivity Link 1/rhcl-tech-preview/mcp-gateway-rhel9 Red Hat High No fix reported
github.com/mark3labs/mcp-go: mcp-go: DNS Rebinding vulnerability due to missing Host header validationCVE-2026-81092 Red Hat Connectivity Link 1/rhcl-tech-preview/mcp-gateway-rhel9-operatorRed Hat Connectivity Link 1/rhcl-tech-preview/mcp-gateway-rhel9 Red Hat Medium No fix reported