Security
فارسی
All products

Multicluster Engine for Kubernetes/multicluster-engine/cluster-api-provider-aws-rhel9

Red Hat · Package
17 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Memory exhaustion in query parameter parsing in net/urlCVE-2025-61726 · GO-2026-4341 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 GoRed Hat High Fix reported
Timing sidechannel for P-256 on ppc64le in crypto/internal/nistecCVE-2025-22866 · GO-2025-3447 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8 GoRed Hat Medium Fix reported
Infinite loop on invalid input in golang.org/x/textCVE-2026-56852 · GO-2026-5970 golang.org/x/textAWS Load Balancer Operator/albo/aws-load-balancer-rhel9-operator GoRed Hat High Fix reported
Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/htmlCVE-2026-42502 · GO-2026-5027 golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
Invoking incorrect handling of character references in DOCTYPE nodes in golang.org/x/net/htmlCVE-2026-25681 · GO-2026-5029 golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat High Fix reported
Invoking duplicate attributes can cause XSS in golang.org/x/net/htmlCVE-2026-27136 · GO-2026-5030 golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat High Fix reported
Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream DecoderCVE-2026-89090 · GHSA-XMRV-PMRH-HHX2Version ranges need review. github.com/aws/aws-sdk-go-v2/aws/protocol/eventstreamgithub.com/aws/aws-sdk-go-v2/service/bedrockagentcore GoRed Hat Medium Fix reported
Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swapCVE-2026-41568 · GHSA-VP62-88P7-QQF5Version ranges need review. github.com/docker/dockergithub.com/moby/moby/v2 GoRed Hat Medium Fix reported
pgx: SQL Injection via placeholder confusion with dollar quoted string literalsCVE-2026-41889 · GHSA-J88V-2CHJ-QFWXVersion ranges need review. github.com/jackc/pgx/v4github.com/jackc/pgx/v5 GoRed Hat Low Fix reported
Denial of service in github.com/jackc/pgproto3/v2CVE-2026-32286 · GHSA-JQCQ-XJH3-6G23Version ranges need review. github.com/jackc/pgproto3/v2Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-controller-rhel9 GoRed Hat High No fix reported
Go Net HTML parser is vulnerable to denial of serviceCVE-2026-25680 · GHSA-5CV4-JP36-H3MWVersion ranges need review. golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
Go JOSE Panics in JWE decryptionCVE-2026-34986 · GHSA-78H2-9FRX-2JM8Version ranges need review. github.com/go-jose/go-jose/v3github.com/go-jose/go-jose/v4 GoRed Hat High Fix reported
gRPC-Go has an authorization bypass via missing leading slash in :pathCVE-2026-33186 · GHSA-P77J-4MVH-X3M3Version ranges need review. google.golang.org/grpcAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Critical Fix reported
golang.org/x/net/html has a Quadratic Parsing Complexity issueCVE-2025-47911 · GHSA-W4GW-W5JQ-G9JH golang.org/x/net/htmlgolang.org/x/net GoRed Hat Medium Fix reported
jose2go is vulnerable to a JWT bomb attack through its decode functionCVE-2025-63811 · GHSA-9MJ6-HXHV-W67JVersion ranges need review. github.com/dvsekhvalnov/jose2goMulticluster Engine for Kubernetes/multicluster-engine/cluster-api-provider-aws-rhel9 GoRed Hat High Fix reported
Infinite parsing loop in golang.org/x/netCVE-2025-58190 · GO-2026-4441 golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 GoRed Hat Medium Fix reported
NetworkManager: NetworkManager: Local privilege escalation via malformed MUD URLs in dhclient backendCVE-2026-10805 Multicluster Engine for Kubernetes/multicluster-engine/cluster-api-provider-aws-rhel9Red Hat JBoss Enterprise Application Platform Expansion Pack/networkmanager Red Hat Medium No fix reported