RHSA-2026:22347

The package `github.com/gomarkdown/markdown` is a Go library for parsing Markdown text and rendering as HTML.

goxmlsig provides XML Digital Signatures implemented in Go.

The DataRow.Decode function fails to properly validate field lengths.

The Delete function fails to properly validate offsets when processing malformed JSON input.

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system.

Moby is an open source container framework.

gRPC-Go is the Go language implementation of gRPC.

Uncontrolled Recursion vulnerability in Apache Thrift Node.js bindings This issue affects Apache Thrift: before 0.23.0.

etcd is a distributed key-value store for the data of a distributed system.

Out-of-bounds Read vulnerability in Apache Thrift.

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system.

When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint.

Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0.

Integer Overflow or Wraparound vulnerability in Apache Thrift.

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards.

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system.

If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources.

During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service.

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system.

When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applie…

url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.

Tempo queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy.

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift.

Parsing a WEBP image with an invalid, large size panics on 32-bit platforms.

Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service.

Out-of-bounds Read vulnerability in Apache Thrift.

Moby is an open source container framework.

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system.

Uncontrolled Recursion vulnerability in Apache Thrift.

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system.

On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root.

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system.

NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system.