Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Migration Toolkit for Applications 8/mta/mta-hub-rhel9
Red Hat
· Package
7 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
chi Has an IP Spoofing Vulnerability in `middleware.RealIP`
CVE-2026-72815 · GHSA-3FXJ-6JH8-HVHX
Version ranges need review.
github.com/go-chi/chi/v5/middleware
github.com/go-chi/chi/v5
Go
Red Hat
Medium
Fix reported
2026-11-04
Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/html
CVE-2026-42502 · GO-2026-5027
golang.org/x/net
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-22
chi's RealIP Middleware allows IP spoofing via unvalidated X-Forwarded-For header
CVE-2026-72816 · GHSA-RJR7-JGGH-PGCP
github.com/go-chi/chi/middleware
github.com/go-chi/chi/v2/middleware
Go
Red Hat
High
Fix reported
2026-09-10
chi Middleware Vulnerable to Potential IP Spoofing via `X-Forwarded-For` Header in `Request.RemoteAddr` Resolution
CVE-2026-72817 · GHSA-9G5Q-2W5X-HMXF
github.com/go-chi/chi/middleware
github.com/go-chi/chi/v2/middleware
Go
Red Hat
High
Fix reported
2026-09-10
Go Net HTML parser is vulnerable to denial of service
CVE-2026-25680 · GHSA-5CV4-JP36-H3MW
Version ranges need review.
golang.org/x/net
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
golang.org/x/net/html has a Quadratic Parsing Complexity issue
CVE-2025-47911 · GHSA-W4GW-W5JQ-G9JH
golang.org/x/net/html
golang.org/x/net
Go
Red Hat
Medium
Fix reported
2026-09-10
kin-openapi openapi3filter: unauthenticated nil-pointer panic when validating a request against a `content` parameter whose media type has no schema
CVE-2026-73502 · GHSA-JPCW-4WR7-C3VQ
Version ranges need review.
github.com/getkin/kin-openapi
Migration Toolkit for Applications 8/mta/mta-hub-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10