Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Multicluster Engine for Kubernetes/multicluster-engine/multicloud-manager-rhel9
Red Hat
· Package
17 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Quadratic string concatenation in consumePhrase in net/mail
CVE-2026-42499 · GO-2026-4977
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
High
Fix reported
2026-10-07
Quadratic string concatentation in consumeComment in net/mail
CVE-2026-39820 · GO-2026-4986
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
High
Fix reported
2026-10-07
Arbitrary inputs are included in errors without any escaping in net/textproto
CVE-2026-42507 · GO-2026-5039
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
Fix reported
2026-10-03
Infinite loop on invalid input in golang.org/x/text
CVE-2026-56852 · GO-2026-5970
golang.org/x/text
AWS Load Balancer Operator/albo/aws-load-balancer-rhel9-operator
Go
Red Hat
High
Fix reported
2026-09-23
gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation
CVE-2026-84304 · GHSA-VP52-PCJ8-J9QC
Version ranges need review.
google.golang.org/grpc
Multicluster Engine for Kubernetes/multicluster-engine/addon-manager-rhel9
Go
Red Hat
High
Fix reported
2026-09-15
OpenTelemetry-Go: multi-value `baggage` header extraction causes excessive allocations (remote dos amplification)
CVE-2026-29181 · GHSA-MH2Q-Q3FH-2475
Version ranges need review.
go.opentelemetry.io/otel
Multicluster Engine for Kubernetes/multicluster-engine/assisted-installer-agent-rhel9
Go
Red Hat
High
Fix reported
2026-09-10
golang.org/x/crypto: Invoking VerifiedPublicKeyCallback permissions skip enforcement
CVE-2026-46595 · GHSA-X527-X647-Q7GG
Version ranges need review.
golang.org/x/crypto
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
Critical
Fix reported
2026-09-10
ReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputil
CVE-2026-39825 · GO-2026-4976
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
Fix reported
2026-08-31
Escaper bypass leads to XSS in html/template
CVE-2026-39826 · GO-2026-4980
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
Fix reported
2026-08-31
Bypass of meta content URL escaping causes XSS in html/template
CVE-2026-39823 · GO-2026-4982
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
Fix reported
2026-08-31
Malicious module proxy can bypass checksum database in cmd/go
CVE-2026-42501 · GO-2026-4984
toolchain
Exploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9
Go
Red Hat
Medium
Fix reported
2026-08-31
Panic in Dial and LookupPort when handling NUL byte on Windows in net
CVE-2026-39836 · GO-2026-4971
stdlib
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-waiters-rhel9
Go
Red Hat
Medium
Fix reported
2026-08-26
Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage
CVE-2026-46600 · GO-2026-5942
golang.org/x/net
stdlib
Go
Red Hat
High
Fix reported
2026-08-17
Excessive resource consumption when printing error string for host certificate validation in crypto/x509
CVE-2025-61729 · GO-2025-4155
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
Go
Red Hat
High
Fix reported
2026-08-14
Helm vulnerable to Code Injection through malicious chart.yaml content
CVE-2025-53547 · GHSA-557J-XG8C-Q2MM
Version ranges need review.
helm.sh/helm/v3
Deployment Validation Operator/dvo/deployment-validation-operator-bundle
Go
Red Hat
High
Fix reported
2026-02-04
Helm Charts with Specific JSON Schema Values Can Cause Memory Exhaustion
CVE-2025-55199 · GHSA-9H84-QMV7-982P
Version ranges need review.
helm.sh/helm/v3
helm.sh/helm
Go
Red Hat
Medium
Fix reported
2026-02-04
Helm May Panic Due To Incorrect YAML Content
CVE-2025-55198 · GHSA-F9F8-9PMF-XV68
Version ranges need review.
helm.sh/helm/v3
helm.sh/helm
Go
Red Hat
Medium
Fix reported
2026-02-04
