| Enforce maximum recursion depth in encoding/asn1CVE-2026-33818 · GO-2026-5972 |
stdlibAWS Load Balancer Operator/albo/aws-load-balancer-operator |
GoRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Fix Javascript regexp context tracking in html/templateCVE-2026-56858 · GO-2026-6091 |
stdlibAWS Load Balancer Operator/albo/aws-load-balancer-controller-rhel8 |
GoRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Limit handshake messages we are willing to accept post-handshake in crypto/tlsCVE-2026-56862 · GO-2026-6090 |
stdlibAWS Load Balancer Operator/albo/aws-load-balancer-operator |
GoRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Avoid quadratic complexity in resolvePath in net/urlCVE-2026-56860 · GO-2026-6218 |
stdlibAWS Load Balancer Operator/albo/aws-load-balancer-operator |
GoRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Incorrect parsing of IPv6 host literals in net/urlCVE-2026-25679 · GO-2026-4601 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 |
GoRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| HTTP/2 transport accepts malformed framing-related headers in net/httpCVE-2026-78660 · GO-2026-6610 |
golang.org/x/netstdlib |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509CVE-2026-33810 · GO-2026-4866 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 |
GoRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSONCVE-2024-24786 · GHSA-8R3F-844C-MC37بازه‌ها نیاز به بررسی دارند. |
google.golang.org/protobuf/encoding/protojsongoogle.golang.org/protobuf/internal/encoding/json |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Incorrect enforcement of email constraints in crypto/x509CVE-2026-27137 · GO-2026-4599 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 |
GoRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| JsBraceDepth Context Tracking Bugs (XSS) in html/templateCVE-2026-32289 · GO-2026-4865 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/redhat-user-workloads/appliance |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Memory exhaustion in query parameter parsing in net/urlCVE-2025-61726 · GO-2026-4341 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 |
GoRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Unexpected work during chain building in crypto/x509CVE-2026-32280 · GO-2026-4947 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 |
GoRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Arbitrary inputs are included in errors without any escaping in net/textprotoCVE-2026-42507 · GO-2026-5039 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Invoking Encrypted Client Hello privacy leak in crypto/tlsCVE-2026-42505 · GO-2026-5856 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Crash when handling long CNAME response in netCVE-2026-33811 · GO-2026-4981 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 |
GoRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| ReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputilCVE-2026-39825 · GO-2026-4976 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Escaper bypass leads to XSS in html/templateCVE-2026-39826 · GO-2026-4980 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Bypass of meta content URL escaping causes XSS in html/templateCVE-2026-39823 · GO-2026-4982 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
| Excessive resource consumption when printing error string for host certificate validation in crypto/x509CVE-2025-61729 · GO-2025-4155 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 |
GoRed Hat |
زیاد
|
اصلاح گزارش شده |
|
| Handshake messages may be processed at the incorrect encryption level in crypto/tlsCVE-2025-61730 · GO-2026-4340 |
stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 |
GoRed Hat |
متوسط
|
اصلاح گزارش شده |
|
