Security
فارسی
All products

Red Hat 3scale API Management Platform 2/3scale-amp2/3scale-rhel9-operator

Red Hat · Package
36 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Quadratic complexity in WordDecoder.DecodeHeader in mimeCVE-2026-42504 · GO-2026-5038 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat High Fix reported
Incorrect parsing of IPv6 host literals in net/urlCVE-2026-25679 · GO-2026-4601 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat High Fix reported
Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/netCVE-2026-33814 · GO-2026-4918 golang.org/x/netstdlib GoRed Hat High Fix reported
Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idnaCVE-2026-39821 · GO-2026-5026 golang.org/x/netstdlib GoRed Hat High Fix reported
HTTP/2 transport accepts malformed framing-related headers in net/httpCVE-2026-78660 · GO-2026-6610 golang.org/x/netstdlib GoRed Hat Medium Fix reported
Lack of limit on size of parsed Range headers in net/httpCVE-2026-78667 · GO-2026-6609 stdlibAWS Load Balancer Operator/albo/aws-load-balancer-rhel8-operator GoRed Hat High Fix reported
Incorrect enforcement of email constraints in crypto/x509CVE-2026-27137 · GO-2026-4599 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat High Fix reported
JsBraceDepth Context Tracking Bugs (XSS) in html/templateCVE-2026-32289 · GO-2026-4865 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/redhat-user-workloads/appliance GoRed Hat Medium Fix reported
Memory exhaustion in query parameter parsing in net/urlCVE-2025-61726 · GO-2026-4341 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 GoRed Hat High Fix reported
Unexpected work during chain building in crypto/x509CVE-2026-32280 · GO-2026-4947 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat High Fix reported
Inefficient policy validation in crypto/x509CVE-2026-32281 · GO-2026-4946 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/redhat-user-workloads/appliance GoRed Hat Medium Fix reported
Arbitrary inputs are included in errors without any escaping in net/textprotoCVE-2026-42507 · GO-2026-5039 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat Medium Fix reported
Inefficient candidate hostname parsing in crypto/x509CVE-2026-27145 · GO-2026-5037 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat High Fix reported
Unexpected session resumption in crypto/tlsCVE-2025-68121 · GO-2026-4337 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat Medium Fix reported
TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unixCVE-2026-32282 · GO-2026-4864 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/redhat-user-workloads/appliance GoRed Hat Medium Fix reported
Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/htmlCVE-2026-42502 · GO-2026-5027 golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
pgx: SQL Injection via placeholder confusion with dollar quoted string literalsCVE-2026-41889 · GHSA-J88V-2CHJ-QFWXVersion ranges need review. github.com/jackc/pgx/v4github.com/jackc/pgx/v5 GoRed Hat Low Fix reported
Go Net HTML parser is vulnerable to denial of serviceCVE-2026-25680 · GHSA-5CV4-JP36-H3MWVersion ranges need review. golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
pgx contains memory-safety vulnerabilityCVE-2026-33815 · GHSA-XGRM-4FWX-7QM8Version ranges need review. github.com/jackc/pgx/v5Multicluster Engine for Kubernetes/multicluster-engine/assisted-service-9-rhel9 GoRed Hat Critical Fix reported
Memory-safety vulnerability in github.com/jackc/pgx/v5.CVE-2026-33816 · GHSA-9JJ7-4M8R-RFCMVersion ranges need review. github.com/jackc/pgx/v5Custom Metric Autoscaler operator for Red Hat Openshift/redhat-user-workloads/keda-operator GoRed Hat Critical Fix reported