Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/klusterlet-addon-controller-rhel9
Red Hat
· Package
12 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna
CVE-2026-39821 · GO-2026-5026
golang.org/x/net
stdlib
Go
Red Hat
High
Fix reported
2026-10-16
Quadratic string concatenation in consumePhrase in net/mail
CVE-2026-42499 · GO-2026-4977
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
High
Fix reported
2026-10-07
Quadratic string concatentation in consumeComment in net/mail
CVE-2026-39820 · GO-2026-4986
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
High
Fix reported
2026-10-07
Memory exhaustion in query parameter parsing in net/url
CVE-2025-61726 · GO-2026-4341
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
Go
Red Hat
High
Fix reported
2026-10-03
Arbitrary inputs are included in errors without any escaping in net/textproto
CVE-2026-42507 · GO-2026-5039
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
Fix reported
2026-10-03
Inefficient candidate hostname parsing in crypto/x509
CVE-2026-27145 · GO-2026-5037
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
High
Fix reported
2026-10-02
ReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputil
CVE-2026-39825 · GO-2026-4976
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
Fix reported
2026-08-31
Escaper bypass leads to XSS in html/template
CVE-2026-39826 · GO-2026-4980
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
Fix reported
2026-08-31
Bypass of meta content URL escaping causes XSS in html/template
CVE-2026-39823 · GO-2026-4982
stdlib
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9
Go
Red Hat
Medium
Fix reported
2026-08-31
Malicious module proxy can bypass checksum database in cmd/go
CVE-2026-42501 · GO-2026-4984
toolchain
Exploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9
Go
Red Hat
Medium
Fix reported
2026-08-31
Panic in Dial and LookupPort when handling NUL byte on Windows in net
CVE-2026-39836 · GO-2026-4971
stdlib
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-waiters-rhel9
Go
Red Hat
Medium
Fix reported
2026-08-26
openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing
CVE-2026-28390
Confidential Cluster Operator/confidential-clusters-beta/confidential-cluster-operator-bundle
Confidential Cluster Operator/redhat-user-workloads/attestation-key-register
Red Hat
Medium
No fix reported
Not recorded
