TI-2026-24815 CVE-2026-32286 · GHSA-jqcq-xjh3-6g23
Denial of service in github.com/jackc/pgproto3/v2
Priority HIGH 72
The DataRow.Decode function fails to properly validate field lengths.
RHSA-2026:11070
RHACS 4.8.11 security and bug fix update
Released 2026-04-27 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Advanced Cluster Security 4.8 registry.redhat.io/advanced-cluster-security/rhacs-main-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-roxctl-rhel8, registry.redhat.io/advanced-cluster-security/rhacs-scanner-rhel8 +2
Fixes 7 records
TI-2026-26188 CVE-2026-33816 · GHSA-9jj7-4m8r-rfcm
CVE-2026-33816 in github.com/jackc/pgx
Priority MEDIUM 50
Memory-safety vulnerability in github.com/jackc/pgx/v5.
TI-2026-26187 CVE-2026-33815 · GHSA-xgrm-4fwx-7qm8
CVE-2026-33815 in github.com/jackc/pgx
Priority MEDIUM 50
Memory-safety vulnerability in github.com/jackc/pgx/v5.
TI-2026-25614 CVE-2026-33186 · GHSA-p77j-4mvh-x3m3
gRPC-Go has an authorization bypass via missing leading slash in :path
Priority MEDIUM 49
gRPC-Go is the Go language implementation of gRPC.
TI-2026-23208 CVE-2026-29063 · GHSA-wf6x-7x77-mvgw
Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable
Priority MEDIUM 46
Immutable.js provides many Persistent Immutable data structures.
TI-2026-27599 CVE-2026-35469 · GHSA-pc3f-x583-g7j2
SpdyStream: DOS on CRI
Priority MEDIUM 45
spdystream is a Go library for multiplexing streams over SPDY connections.
TI-2026-27208 CVE-2026-34986 · GHSA-78h2-9frx-2jm8
Go JOSE affect by a panic in JWE decryption
Priority MEDIUM 40
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards.