Security
فارسی
All products

Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/lighthouse-coredns-rhel9

Red Hat · Package
17 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
compress zstd: Panic on two-block framesCVE-2026-116591 · GHSA-FPMH-FRQ8-7RJ8 github.com/klauspost/compress/zstdgithub.com/klauspost/compress GoRed Hat High Fix reported
CoreDNS `k8s_external` headless AXFR can emit an empty transfer batch that panics the `transfer` pluginCVE-2026-62994 · GHSA-74W3-63XV-X9MVVersion ranges need review. github.com/coredns/corednsRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/lighthouse-agent-rhel9 GoRed Hat Low Fix reported
Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream DecoderCVE-2026-89090 · GHSA-XMRV-PMRH-HHX2Version ranges need review. github.com/aws/aws-sdk-go-v2/aws/protocol/eventstreamgithub.com/aws/aws-sdk-go-v2/service/bedrockagentcore GoRed Hat Medium Fix reported
CoreDNS has TSIG authentication bypass on DoT, DoH, DoH3, DoQ, and gRPCCVE-2026-33190 · GHSA-QHMP-Q7XH-99RHVersion ranges need review. github.com/coredns/corednsRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/lighthouse-agent-rhel9 GoRed Hat High Fix reported
CoreDNS' DoQ worker pool does not bound stream backlogCVE-2026-32934 · GHSA-2WPX-QPW2-G5H5Version ranges need review. github.com/coredns/corednsRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/lighthouse-agent-rhel9 GoRed Hat High Fix reported
quic-go: HTTP/3 QPACK Trailer Expansion Memory Exhaustion CVE-2026-40898 · GHSA-VVGJ-X9JQ-8CJ9Version ranges need review. github.com/quic-go/quic-goRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/lighthouse-coredns-rhel9 GoRed Hat Medium Fix reported
Go Net HTML parser is vulnerable to denial of serviceCVE-2026-25680 · GHSA-5CV4-JP36-H3MWVersion ranges need review. golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
CoreDNS' transfer stanza selection uses lexicographic compare (subzone ACL bypass)CVE-2026-33489 · GHSA-H8MM-C463-WJQ3Version ranges need review. github.com/coredns/corednsRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/lighthouse-agent-rhel9 GoRed Hat High Fix reported
golang.org/x/net/html has a Quadratic Parsing Complexity issueCVE-2025-47911 · GHSA-W4GW-W5JQ-G9JH golang.org/x/net/htmlgolang.org/x/net GoRed Hat Medium Fix reported
CoreDNS: DNS Cache Pinning via etcd Lease ID ConfusionCVE-2025-58063 · GHSA-93MF-426M-G6X9Version ranges need review. github.com/coredns/corednsRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/lighthouse-agent-rhel9 GoRed Hat High Fix reported
golang.org/x/net vulnerable to Cross-site ScriptingCVE-2025-22872 · GHSA-VVGC-356P-C3XWVersion ranges need review. golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8 GoRed Hat Medium Fix reported
HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/netCVE-2025-22870 · GHSA-QXP5-GWG8-XV66Version ranges need review. golang.org/x/netstdlib GoRed Hat Medium Fix reported
golang.org/x/text/language Out-of-bounds Read vulnerabilityCVE-2021-38561 · GHSA-PPP9-7JFF-5VJ2Version ranges need review. golang.org/x/textOpenShift Developer Tools and Services/odo GoRed Hat High Fix reported
golang.org/x/text/language Denial of service via crafted Accept-Language headerCVE-2022-32149 · GHSA-69CH-W2M2-3VJPVersion ranges need review. golang.org/x/textOpenShift Developer Tools and Services/odo GoRed Hat High Fix reported
Infinite parsing loop in golang.org/x/netCVE-2025-58190 · GO-2026-4441 golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 GoRed Hat Medium Fix reported
Submariner Operator sets unnecessary RBAC permissionsCVE-2024-5042 · GHSA-2RHX-QHXP-5JPWVersion ranges need review. github.com/submariner-io/submariner-operatorRed Hat Advanced Cluster Management for Kubernetes 2/rhacm2/lighthouse-agent-rhel9 GoRed Hat Medium Fix reported
github.com/coredns/coredns: CoreDNS: Denial of Service via specially crafted DNS queryCVE-2026-62299 Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/lighthouse-agent-rhel9Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/lighthouse-coredns-rhel9 Red Hat Medium No fix reported