TI-2026-18923 CVE-2026-23490 · GHSA-63vm-454h-vhhq
pyasn1 has a DoS vulnerability in decoder
Priority HIGH 72
pyasn1 is a generic ASN.1 library for Python.
RHSA-2026:17595
OpenShift Container Platform 4.17.54 packages and security update
Released 2026-05-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- Ironic content for Red Hat OpenShift Container Platform 4.17 python-pyasn1-0.5.1-4.el9, python-pyasn1-doc-0.5.1-4.el9, python3-pyasn1-0.5.1-4.el9 +1
- Red Hat OpenShift Container Platform 4.17 podman-5:5.2.2-18.rhaos4.17.el8, podman-5:5.2.2-18.rhaos4.17.el9, podman-catatonit-5:5.2.2-18.rhaos4.17.el8 +9
Fixes 6 records
TI-2025-41709 CVE-2025-68121 · GHSA-h355-32pf-p2xm
Unexpected session resumption in crypto/tls
Priority MEDIUM 51
During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have…
TI-2025-38128 CVE-2025-61726 · GHSA-gm9r-q53w-2gh4
Memory exhaustion in query parameter parsing in net/url
Priority MEDIUM 43
The net/url package does not set a limit on the number of query parameters in a query.
TI-2025-38131 CVE-2025-61729 · GHSA-7c64-f9jr-v9h2
Excessive resource consumption when printing error string for host certificate validation in crypto/x509
Priority LOW 33
Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out.
TI-2025-38130 CVE-2025-61728 · GHSA-g9q4-qjx4-2v7q
Excessive CPU consumption when building archive index in archive/zip
Priority LOW 30
archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened.
TI-2025-35990 CVE-2025-58183 · GHSA-9gcr-gp5f-jw27
Unbounded allocation when parsing GNU sparse map in archive/tar
Priority LOW 20
tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files.