TI-2026-25883 CVE-2026-33487 · GHSA-479m-364c-43vc
goxmldsig has validateSignature Loop Variable Capture Signature Bypass
Priority HIGH 72
goxmlsig provides XML Digital Signatures implemented in Go.
RHSA-2026:22423
Multicluster Global Hub 1.3.4 security update
Released 2026-06-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Multicluster Global Hub 1.3.4 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +1
Fixes 19 records
TI-2026-24815 CVE-2026-32286 · GHSA-jqcq-xjh3-6g23
Denial of service in github.com/jackc/pgproto3/v2
Priority HIGH 72
The DataRow.Decode function fails to properly validate field lengths.
TI-2026-24814 CVE-2026-32285 · GHSA-6g7g-w4f8-9c9x
Denial of service in github.com/buger/jsonparser
Priority HIGH 72
The Delete function fails to properly validate offsets when processing malformed JSON input.
TI-2026-26188 CVE-2026-33816 · GHSA-9jj7-4m8r-rfcm
CVE-2026-33816 in github.com/jackc/pgx
Priority MEDIUM 50
Memory-safety vulnerability in github.com/jackc/pgx/v5.
TI-2026-26187 CVE-2026-33815 · GHSA-xgrm-4fwx-7qm8
CVE-2026-33815 in github.com/jackc/pgx
Priority MEDIUM 50
Memory-safety vulnerability in github.com/jackc/pgx/v5.
TI-2026-25614 CVE-2026-33186 · GHSA-p77j-4mvh-x3m3
gRPC-Go has an authorization bypass via missing leading slash in :path
Priority MEDIUM 49
gRPC-Go is the Go language implementation of gRPC.
TI-2026-30157 CVE-2026-41636 · GHSA-r67j-r569-jrwp
Apache Thrift: Node.js skip() recursion
Priority MEDIUM 44
Uncontrolled Recursion vulnerability in Apache Thrift Node.js bindings This issue affects Apache Thrift: before 0.23.0.
TI-2026-30145 CVE-2026-41604 · GHSA-r4rx-ffxv-23vw
Apache Thrift: Swift Range crash in skip()
Priority MEDIUM 43
Out-of-bounds Read vulnerability in Apache Thrift.
TI-2026-30144 CVE-2026-41602 · GHSA-wf45-q9ch-q8gh
Apache Thrift: Go TFramedTransport uint32 overflow
Priority MEDIUM 41
Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0.
TI-2026-30146 CVE-2026-41605 · GHSA-qcp3-xfwx-5hr4
Apache Thrift: Swift Compact Protocol integer overflow
Priority MEDIUM 40
Integer Overflow or Wraparound vulnerability in Apache Thrift.
TI-2026-27208 CVE-2026-34986 · GHSA-78h2-9frx-2jm8
Go JOSE affect by a panic in JWE decryption
Priority MEDIUM 40
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards.
TI-2026-24812 CVE-2026-32283 · GHSA-jrg3-gfjw-hm96
Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls
Priority MEDIUM 40
If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources.
TI-2026-21587 CVE-2026-27137 · GHSA-7hfw-r8qc-89v4
Incorrect enforcement of email constraints in crypto/x509
Priority MEDIUM 40
When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applie…
TI-2026-20764 CVE-2026-25679 · GHSA-j3gx-2473-5fp8
Incorrect parsing of IPv6 host literals in net/url
Priority MEDIUM 40
url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.
TI-2026-17501 CVE-2026-21728 · GHSA-p4r4-xvrq-gvmc
Tempo query limit results in unbounded memory allocation
Priority MEDIUM 40
Tempo queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy.
TI-2026-31933 CVE-2026-43869 · GHSA-7pwc-h2j2-rjgj
Apache Thrift: TSSLTransportFactory.java hostname verification
Priority LOW 39
Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift.
TI-2026-30148 CVE-2026-41607 · GHSA-7gqw-825c-3842
Apache Thrift: C++ JSON OOB read
Priority LOW 37
Out-of-bounds Read vulnerability in Apache Thrift.
TI-2026-30147 CVE-2026-41606 · GHSA-h5hj-56h4-rwcp
Apache Thrift: c_glib dispatch stack overflow
Priority LOW 32
Uncontrolled Recursion vulnerability in Apache Thrift.
TI-2026-24811 CVE-2026-32282 · GHSA-xj38-jxc5-rppx
TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix
Priority LOW 30
On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root.