| compress zstd: Panic on two-block framesCVE-2026-116591 · GHSA-FPMH-FRQ8-7RJ8 |
github.com/klauspost/compress/zstdAWS Load Balancer Operator/albo/aws-load-balancer-controller-rhel8 |
GoRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Quadratic complexity in WordDecoder.DecodeHeader in mimeCVE-2026-42504 · GO-2026-5038 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 |
GoRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Enforce maximum recursion depth in encoding/asn1CVE-2026-33818 · GO-2026-5972 |
stdlibAWS Load Balancer Operator/albo/aws-load-balancer-operator |
GoRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| github.com/moby/sys/user has a possible DoS via unbounded parsing of user and group database filesCVE-2026-61801 · GHSA-MJCV-P78Q-W5FWبازه‌ها نیاز به بررسی دارند. |
github.com/moby/sys/userAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Incorrect parsing of IPv6 host literals in net/urlCVE-2026-25679 · GO-2026-4601 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 |
GoRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idnaCVE-2026-39821 · GO-2026-5026 |
golang.org/x/netstdlib |
GoRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509CVE-2026-33810 · GO-2026-4866 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 |
GoRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Tracing logging user input may result in poisoning logs with ANSI escape sequencesCVE-2025-58160 · GHSA-XWFJ-JGWM-7WP5بازه‌ها نیاز به بررسی دارند. |
tracing-subscriberConfidential Compute Attestation/build-of-trustee/trustee-rhel9 |
Rust / CargoRed Hat |
کم
|
اصلاح گزارش شده |
|
| Incorrect enforcement of email constraints in crypto/x509CVE-2026-27137 · GO-2026-4599 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 |
GoRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Quadratic string concatenation in consumePhrase in net/mailCVE-2026-42499 · GO-2026-4977 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 |
GoRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Quadratic string concatentation in consumeComment in net/mailCVE-2026-39820 · GO-2026-4986 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 |
GoRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Memory exhaustion in query parameter parsing in net/urlCVE-2025-61726 · GO-2026-4341 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 |
GoRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tlsCVE-2026-32283 · GO-2026-4870 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 |
GoRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Unexpected work during chain building in crypto/x509CVE-2026-32280 · GO-2026-4947 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 |
GoRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Arbitrary inputs are included in errors without any escaping in net/textprotoCVE-2026-42507 · GO-2026-5039 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Invoking Encrypted Client Hello privacy leak in crypto/tlsCVE-2026-42505 · GO-2026-5856 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Inefficient candidate hostname parsing in crypto/x509CVE-2026-27145 · GO-2026-5037 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 |
GoRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Unexpected session resumption in crypto/tlsCVE-2025-68121 · GO-2026-4337 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Crash when handling long CNAME response in netCVE-2026-33811 · GO-2026-4981 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 |
GoRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| containerd: CRI ExecSync Goroutine Leak Leads to Node-Level Denial of ServiceCVE-2026-53495 · GHSA-7JXH-36Q5-GCQVبازه‌ها نیاز به بررسی دارند. |
github.com/containerd/containerd/v2github.com/containerd/containerd |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
