All products

Red Hat OpenShift AI (RHOAI)/rhoai/odh-llm-d-batch-gateway-gc-rhel9

Red Hat · Package
13 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Distrust compromised intermediate certificates in crypto/x509CVE-2026-111943 · GO-2026-6809 rustls-webpkiwebpki-root-certs Rust / CargoGoRed Hat High Fix reported
Fix Javascript regexp context tracking in html/templateCVE-2026-56858 · GO-2026-6091 stdlibAWS Load Balancer Operator/albo/aws-load-balancer-controller-rhel8 GoRed Hat High Fix reported
Add recursion depth guard during decode in encoding/xmlCVE-2026-56859 · GO-2026-6088 stdlibAWS Load Balancer Operator/albo/aws-load-balancer-operator GoRed Hat High Fix reported
Limit handshake messages we are willing to accept post-handshake in crypto/tlsCVE-2026-56862 · GO-2026-6090 stdlibAWS Load Balancer Operator/albo/aws-load-balancer-operator GoRed Hat High Fix reported
Avoid quadratic complexity in resolvePath in net/urlCVE-2026-56860 · GO-2026-6218 stdlibAWS Load Balancer Operator/albo/aws-load-balancer-operator GoRed Hat High Fix reported
Lack of limit on size of parsed Range headers in net/httpCVE-2026-78667 · GO-2026-6609 stdlibAWS Load Balancer Operator/albo/aws-load-balancer-rhel8-operator GoRed Hat High Fix reported
Excessive CPU consumption from repeated initial window changes in net/httpCVE-2026-78669 · GO-2026-6611 golang.org/x/netstdlib GoRed Hat High Fix reported
Reject malformed ECH outer extension references in crypto/tlsCVE-2026-97031 · GO-2026-6607 stdlibExploit Intelligence/exploit-intelligence/exploit-intelligence-operator-controller-rhel9 GoRed Hat High Fix reported
Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/httpCVE-2026-56853 · GO-2026-6089 stdlibAWS Load Balancer Operator/albo/aws-load-balancer-operator GoRed Hat High Fix reported
Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream DecoderCVE-2026-89090 · GHSA-XMRV-PMRH-HHX2Version ranges need review. github.com/aws/aws-sdk-go-v2/aws/protocol/eventstreamgithub.com/aws/aws-sdk-go-v2/service/bedrockagentcore GoRed Hat Medium Fix reported
ReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputilCVE-2026-39825 · GO-2026-4976 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat Medium Fix reported
Escaper bypass leads to XSS in html/templateCVE-2026-39826 · GO-2026-4980 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat Medium Fix reported
Bypass of meta content URL escaping causes XSS in html/templateCVE-2026-39823 · GO-2026-4982 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat Medium Fix reported