All products

Red Hat Service Interconnect 1/qpid-proton

Red Hat · Package
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Incorrect parsing of IPv6 host literals in net/urlCVE-2026-25679 · GO-2026-4601 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat High Fix reported
Memory exhaustion in query parameter parsing in net/urlCVE-2025-61726 · GO-2026-4341 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 GoRed Hat High Fix reported
TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unixCVE-2026-32282 · GO-2026-4864 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/redhat-user-workloads/appliance GoRed Hat Medium Fix reported
Crash when handling long CNAME response in netCVE-2026-33811 · GO-2026-4981 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat High Fix reported
Golang FIPS OpenSSL has a Use of Uninitialized Variable vulnerabilityCVE-2024-9355 · GHSA-3H3X-2HWV-HR52Version ranges need review. github.com/golang-fips/opensslNBDE Tang Server/tang-operator-bundle-container GoRed Hat High No fix reported
Panic in Dial and LookupPort when handling NUL byte on Windows in netCVE-2026-39836 · GO-2026-4971 stdlibBuilds for Red Hat OpenShift/openshift-builds/openshift-builds-waiters-rhel9 GoRed Hat Medium Fix reported
Memory leaks in code encrypting and verifying RSA payloadsCVE-2024-1394 · GHSA-78HX-GP6G-7MJ6Version ranges need review. github.com/golang-fips/gogithub.com/golang-fips/openssl/v2 GoRed Hat High Fix reported
Parsing DER payload can cause memory exhaustion in encoding/asn1CVE-2025-58185 · GO-2025-4011 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat Medium Fix reported
Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netipCVE-2024-24790 · GO-2024-2887 stdlibBuilds for Red Hat OpenShift/openshift-builds/openshift-builds-waiters-rhel8 GoRed Hat Medium Fix reported
Malformed DNS message can cause infinite loop in netCVE-2024-24788 · GO-2024-2824 stdlibCost Management Metrics Operator/costmanagement-metrics-operator-container GoRed Hat Medium Fix reported