Red Hat OpenShift Container Platform 5/openshift5/ose-thanos-rhel9

Red Hat · Package

7 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
compress zstd: Panic on two-block framesCVE-2026-116591 · GHSA-FPMH-FRQ8-7RJ8	github.com/klauspost/compress/zstd github.com/klauspost/compress	GoRed Hat	High	Fix reported	2026-11-06
Compress/s2: Integer Overflow or Wraparound and Out-of-bounds Write in compressCVE-2026-63209 · GHSA-259R-337F-4RFWVersion ranges need review.	github.com/klauspost/compress File Integrity Operator/compliance/openshift-file-integrity-operator-bundle	GoRed Hat	High	Fix reported	2026-10-20
Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/netCVE-2026-33814 · GO-2026-4918	golang.org/x/net stdlib	GoRed Hat	High	Fix reported	2026-10-16
Infinite loop on invalid input in golang.org/x/textCVE-2026-56852 · GO-2026-5970	golang.org/x/text AWS Load Balancer Operator/albo/aws-load-balancer-rhel9-operator	GoRed Hat	High	Fix reported	2026-09-23
Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream DecoderCVE-2026-89090 · GHSA-XMRV-PMRH-HHX2Version ranges need review.	github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream github.com/aws/aws-sdk-go-v2/service/bedrockagentcore	GoRed Hat	Medium	Fix reported	2026-09-12
opentelemetry-go's baggage parsing no longer caps raw header lengthCVE-2026-41178 · GHSA-5WRP-CWCJ-Q835	go.opentelemetry.io/otel/baggage go.opentelemetry.io/otel/propagation	GoRed Hat	Medium	Fix reported	2026-09-10
Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessageCVE-2026-46600 · GO-2026-5942	golang.org/x/net stdlib	GoRed Hat	High	Fix reported	2026-08-17