| Apache Kerby vulnerable to denial of serviceCVE-2026-57914 · GHSA-X6VC-X4V4-HJHR |
org.apache.kerby:kerby-asn1Red Hat AMQ Clients/kerby-asn1 |
MavenRed Hat |
Medium
|
Fix reported |
|
| Distrust compromised intermediate certificates in crypto/x509CVE-2026-111943 · GO-2026-6809 |
rustls-webpkiwebpki-root-certs |
Rust / CargoGoRed Hat |
High
|
Fix reported |
|
| snappy-java: JVM crash from unchecked ranges in Snappy.arrayCopy and SnappyOutputStream.rawWriteCVE-2026-116590 · GHSA-XQRX-QH46-34M7 |
org.xerial.snappy:snappy-javaOpenShift Serverless/openshift-serverless-1/kn-ekb-dispatcher-rhel9 |
MavenRed Hat |
Medium
|
Fix reported |
|
| snappy-java: Heap buffer overflow in Snappy.uncompress*Array typed-array methodsCVE-2026-93451 · GHSA-GWQ9-9FFJ-MVRV |
org.xerial.snappy:snappy-javaRed Hat Ceph Storage 8/liborc |
MavenRed Hat |
High
|
Fix reported |
|
| snappy-java: Unbounded memory allocation from attacker-declared uncompressed lengthaCVE-2026-108106 · GHSA-Q233-G92Q-QXP6 |
org.xerial.snappy:snappy-javaRed Hat Ceph Storage 7/liborc |
MavenRed Hat |
High
|
Fix reported |
|
| Google Guava: CompactHashMap/CompactHashSet/MapMakerInternalMap deserialization triggers uncontrolled memory allocationCVE-2026-102554 · GHSA-XXPH-C9WW-HJ94 |
com.google.guava:guavaExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 |
MavenRed Hat |
High
|
Fix reported |
|
| Compress/s2: Integer Overflow or Wraparound and Out-of-bounds Write in compressCVE-2026-63209 · GHSA-259R-337F-4RFWVersion ranges need review. |
github.com/klauspost/compressFile Integrity Operator/compliance/openshift-file-integrity-operator-bundle |
GoRed Hat |
High
|
Fix reported |
|
| jackson-databind: @JsonView bypassed for @JsonUnwrapped container properties on deserializationCVE-2026-59889 · GHSA-5GVW-P9QM-JGWH |
com.fasterxml.jackson.core:jackson-databindtools.jackson.core:jackson-databind |
MavenRed Hat |
Medium
|
Fix reported |
|
| Lack of limit on size of parsed Range headers in net/httpCVE-2026-78667 · GO-2026-6609 |
stdlibExploit Intelligence/exploit-intelligence/agent-client-rhel9 |
GoRed Hat |
High
|
Fix reported |
|
| Excessive CPU consumption from repeated initial window changes in net/httpCVE-2026-78669 · GO-2026-6611 |
golang.org/x/netstdlib |
GoRed Hat |
High
|
Fix reported |
|
| Reject malformed ECH outer extension references in crypto/tlsCVE-2026-97031 · GO-2026-6607 |
stdlibExploit Intelligence/exploit-intelligence/exploit-intelligence-operator-controller-rhel9 |
GoRed Hat |
High
|
Fix reported |
|
| Apache Spark History Server allows stored cross-site scripting through unescaped application namesCVE-2026-32773 · GHSA-9437-39HJ-3C93Version ranges need review. |
org.apache.spark:spark-core_2.12org.apache.spark:spark-core_2.13 |
MavenPyPIRed Hat |
Medium
|
Fix reported |
|
| yawkat LZ4 Java: LZ4BlockInputStream with stopOnEmptyBlock=false recurses once per empty block, causing StackOverflowErrorCVE-2026-106449 · GHSA-343H-94H5-C4WR |
at.yawk.lz4:lz4-javaorg.lz4:lz4-java |
MavenRed Hat |
Low
|
Fix reported |
|
| yawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local userCVE-2026-106451 · GHSA-MCR4-QMVW-PX4G |
at.yawk.lz4:lz4-javaorg.lz4:lz4-java |
MavenRed Hat |
High
|
Fix reported |
|
| yawkat LZ4 Java: LZ4FrameInputStream reallocates block buffers for every frame, allowing CPU and GC amplification from small inputsCVE-2026-106450 · GHSA-GM45-99XC-R7WV |
at.yawk.lz4:lz4-javaorg.lz4:lz4-java |
MavenRed Hat |
Medium
|
Fix reported |
|
| yawkat LZ4 Java: LZ4DecompressorWithLength allocates the unvalidated size from the 4-byte length header, so a 5-byte input triggers a 1 GiB allocation and OutOfMemoryErrorCVE-2026-106453 · GHSA-6CX8-RJF8-PR8G |
at.yawk.lz4:lz4-javaorg.lz4:lz4-java |
MavenRed Hat |
Medium
|
Fix reported |
|
| yawkat LZ4 Java: LZ4BlockInputStream allocates an unvalidated compressed length from the stream headerCVE-2026-106452 · GHSA-4V53-57PG-C464 |
at.yawk.lz4:lz4-javaorg.lz4:lz4-java |
MavenRed Hat |
Medium
|
Fix reported |
|
| jackson-core: ReDoS: quadratic backtracking in NumberInput.PATTERN_FLOAT via looksLikeValidNumber()CVE-2026-89407 · GHSA-P6PP-M3F8-5C89 |
com.fasterxml.jackson.core:jackson-coretools.jackson.core:jackson-core |
MavenRed Hat |
High
|
Fix reported |
|
| jackson-core: UTF8DataInputJsonParser._reportInvalidToken() missing maxErrorTokenLength limit -> unbounded StringBuilder growth (DoS)CVE-2026-89425 · GHSA-7HHH-6RMP-J9QF |
com.fasterxml.jackson.core:jackson-coretools.jackson.core:jackson-core |
MavenRed Hat |
High
|
Fix reported |
|
| jackson-databind quadratic forward-reference completion CVE-2026-91777 · GHSA-CXP5-3PX4-PW24 |
com.fasterxml.jackson.core:jackson-databindtools.jackson.core:jackson-databind |
MavenRed Hat |
High
|
Fix reported |
|
