Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Multicluster Engine for Kubernetes/multicluster-engine/assisted-image-service-rhel9
Red Hat
· Package
9 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
compress zstd: Panic on two-block frames
CVE-2026-116591 · GHSA-FPMH-FRQ8-7RJ8
github.com/klauspost/compress/zstd
github.com/klauspost/compress
Go
Red Hat
High
Fix reported
2026-11-06
Memory exhaustion in query parameter parsing in net/url
CVE-2025-61726 · GO-2026-4341
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
Go
Red Hat
High
Fix reported
2026-10-03
chi's RealIP Middleware allows IP spoofing via unvalidated X-Forwarded-For header
CVE-2026-72816 · GHSA-RJR7-JGGH-PGCP
github.com/go-chi/chi/middleware
github.com/go-chi/chi/v2/middleware
Go
Red Hat
High
Fix reported
2026-09-10
chi Middleware Vulnerable to Potential IP Spoofing via `X-Forwarded-For` Header in `Request.RemoteAddr` Resolution
CVE-2026-72817 · GHSA-9G5Q-2W5X-HMXF
github.com/go-chi/chi/middleware
github.com/go-chi/chi/v2/middleware
Go
Red Hat
High
Fix reported
2026-09-10
chi has an open redirect vulnerability in the RedirectSlashes middleware
CVE-2025-69725 · GHSA-MQQF-5WVP-8FH8
Version ranges need review.
github.com/go-chi/chi/v2
github.com/go-chi/chi/v3
Go
Red Hat
Medium
Fix reported
2026-09-10
github.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archives
CVE-2025-58058 · GHSA-JC7W-C686-C4V9
Version ranges need review.
github.com/ulikunitz/xz
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-controller-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
Denial of service via malicious preflight requests in github.com/rs/cors
CVE-2025-47908 · GHSA-MH55-GQVF-XFWM
Version ranges need review.
github.com/rs/cors
Multicluster Engine for Kubernetes/multicluster-engine/agent-service-rhel8
Go
Red Hat
Medium
Fix reported
2026-09-10
Excessive resource consumption when printing error string for host certificate validation in crypto/x509
CVE-2025-61729 · GO-2025-4155
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
Go
Red Hat
High
Fix reported
2026-08-14
github.com/diskfs/go-diskfs: rclone: Denial of Service via malicious SquashFS image parsing
CVE-2026-79775
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Cryostat 4/cryostat/cryostat-storage-rhel9
Red Hat
Medium
No fix reported
Not recorded