Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat OpenShift distributed tracing 3/rhosdt/tempo-gateway-rhel9
Red Hat
· Package
6 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
chi Has an IP Spoofing Vulnerability in `middleware.RealIP`
CVE-2026-72815 · GHSA-3FXJ-6JH8-HVHX
Version ranges need review.
github.com/go-chi/chi/v5/middleware
github.com/go-chi/chi/v5
Go
Red Hat
Medium
Fix reported
2026-11-04
HTTP/2 transport accepts malformed framing-related headers in net/http
CVE-2026-78660 · GO-2026-6610
golang.org/x/net
stdlib
Go
Red Hat
Medium
Fix reported
2026-10-16
chi's RealIP Middleware allows IP spoofing via unvalidated X-Forwarded-For header
CVE-2026-72816 · GHSA-RJR7-JGGH-PGCP
github.com/go-chi/chi/middleware
github.com/go-chi/chi/v2/middleware
Go
Red Hat
High
Fix reported
2026-09-10
chi Middleware Vulnerable to Potential IP Spoofing via `X-Forwarded-For` Header in `Request.RemoteAddr` Resolution
CVE-2026-72817 · GHSA-9G5Q-2W5X-HMXF
github.com/go-chi/chi/middleware
github.com/go-chi/chi/v2/middleware
Go
Red Hat
High
Fix reported
2026-09-10
Grafana Tempo has an Uncontrolled Resource Consumption issue
CVE-2026-21728 · GHSA-P4R4-XVRQ-GVMC
Version ranges need review.
github.com/grafana/tempo
Red Hat Ceph Storage 5/rhceph/rhceph-5-dashboard-rhel8
Go
Red Hat
High
Fix reported
2026-09-10
Prometheus Azure AD remote write OAuth client secret exposed via config API
CVE-2026-42151 · GHSA-WG65-39GG-5WFJ
Version ranges need review.
github.com/prometheus/prometheus
File Integrity Operator/compliance/openshift-file-integrity-operator-bundle
Go
Red Hat
High
Fix reported
2026-09-09
