TI-2026-25614 CVE-2026-33186 · GHSA-p77j-4mvh-x3m3
gRPC-Go has an authorization bypass via missing leading slash in :path
Priority MEDIUM 49
gRPC-Go is the Go language implementation of gRPC.
RHSA-2026:18585
Assisted Installer RHEL 9 components for Multicluster Engine for Kubernetes 2.9.4
Released 2026-05-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- multicluster engine for Kubernetes 2.9 registry.redhat.io/multicluster-engine/assisted-installer-controller-rhel9, registry.redhat.io/multicluster-engine/assisted-installer-rhel9, registry.redhat.io/multicluster-engine/assisted-service-9-rhel9
Fixes 3 records
TI-2026-27208 CVE-2026-34986 · GHSA-78h2-9frx-2jm8
Go JOSE affect by a panic in JWE decryption
Priority MEDIUM 40
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards.
TI-2026-06286 CVE-2026-7163 · GHSA-62pm-2jjw-mqpx
Cleartext storage of sensitive information in assisted-service
Priority LOW 27
A vulnerability in the assisted-service REST API, an optional Assisted Installer (assisted-service) component in the Multicluster Engine (MCE), allows an authenticated user with minimal namespace-scoped privileges to obt…