All products

Multicluster Engine for Kubernetes/multicluster-engine/assisted-image-service-rhel9

Red Hat · Package
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
compress zstd: Panic on two-block framesCVE-2026-116591 · GHSA-FPMH-FRQ8-7RJ8 github.com/klauspost/compress/zstdgithub.com/klauspost/compress GoRed Hat High Fix reported
Memory exhaustion in query parameter parsing in net/urlCVE-2025-61726 · GO-2026-4341 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 GoRed Hat High Fix reported
chi's RealIP Middleware allows IP spoofing via unvalidated X-Forwarded-For headerCVE-2026-72816 · GHSA-RJR7-JGGH-PGCP github.com/go-chi/chi/middlewaregithub.com/go-chi/chi/v2/middleware GoRed Hat High Fix reported
chi Middleware Vulnerable to Potential IP Spoofing via `X-Forwarded-For` Header in `Request.RemoteAddr` ResolutionCVE-2026-72817 · GHSA-9G5Q-2W5X-HMXF github.com/go-chi/chi/middlewaregithub.com/go-chi/chi/v2/middleware GoRed Hat High Fix reported
chi has an open redirect vulnerability in the RedirectSlashes middlewareCVE-2025-69725 · GHSA-MQQF-5WVP-8FH8Version ranges need review. github.com/go-chi/chi/v2github.com/go-chi/chi/v3 GoRed Hat Medium Fix reported
github.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archivesCVE-2025-58058 · GHSA-JC7W-C686-C4V9Version ranges need review. github.com/ulikunitz/xzAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-controller-rhel9 GoRed Hat Medium Fix reported
Denial of service via malicious preflight requests in github.com/rs/corsCVE-2025-47908 · GHSA-MH55-GQVF-XFWMVersion ranges need review. github.com/rs/corsMulticluster Engine for Kubernetes/multicluster-engine/agent-service-rhel8 GoRed Hat Medium Fix reported
Excessive resource consumption when printing error string for host certificate validation in crypto/x509CVE-2025-61729 · GO-2025-4155 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 GoRed Hat High Fix reported
github.com/diskfs/go-diskfs: rclone: Denial of Service via malicious SquashFS image parsingCVE-2026-79775 Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9Cryostat 4/cryostat/cryostat-storage-rhel9 Red Hat Medium No fix reported