Red Hat Service Interconnect 2/service-interconnect/skupper-controller-rhel9

Red Hat · Package

5 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
kin-openapi has uncontrolled resource consumption in openapi3filter deepObject query parameter decodingCVE-2026-77354 · GHSA-XHJ3-7XW9-VR34Version ranges need review.	github.com/getkin/kin-openapi OpenShift Serverless/openshift-serverless-1/kn-backstage-plugins-eventmesh-rhel9	GoRed Hat	High	Fix reported	2026-09-10
kin-openapi openai3filter: nil-pointer panic in ConvertErrors on malformed multipart/form-data body enables unauthenticated DoSCVE-2026-76905 · GHSA-MMFR-PMJX-HW9WVersion ranges need review.	github.com/getkin/kin-openapi OpenShift Serverless/openshift-serverless-1/kn-backstage-plugins-eventmesh-rhel9	GoRed Hat	High	Fix reported	2026-09-10
kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc DefaultCVE-2026-73501 · GHSA-R277-6W6Q-XMQWVersion ranges need review.	github.com/getkin/kin-openapi OpenShift Serverless/kn-workflow-plugin	GoRed Hat	Critical	Fix reported	2026-09-10
kin-openapi openapi3filter: unauthenticated nil-pointer panic when validating a request against a `content` parameter whose media type has no schemaCVE-2026-73502 · GHSA-JPCW-4WR7-C3VQVersion ranges need review.	github.com/getkin/kin-openapi Migration Toolkit for Applications 8/mta/mta-hub-rhel9	GoRed Hat	Medium	Fix reported	2026-09-10
go.mongodb.org/mongo-driver: go.mongodb.org/mongo-driver/v2: MongoDB Go Driver: Data deletion via query-operator injection in GridFS file IDsCVE-2026-88031	Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9	Red Hat	High	No fix reported	Not recorded