TI-2026-26188 CVE-2026-33816 · GHSA-9jj7-4m8r-rfcm
CVE-2026-33816 in github.com/jackc/pgx
Priority MEDIUM 50
Memory-safety vulnerability in github.com/jackc/pgx/v5.
RHSA-2026:24482
RHTAS 1.3.5 - Red Hat Trusted Artifact Signer Release
Released 2026-06-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Trusted Artifact Signer 1.3 registry.redhat.io/rhtas/fetch-tsa-certs-rhel9, registry.redhat.io/rhtas/gitsign-rhel9, registry.redhat.io/rhtas/rekor-cli-rhel9 +1
Fixes 5 records
TI-2026-26187 CVE-2026-33815 · GHSA-xgrm-4fwx-7qm8
CVE-2026-33815 in github.com/jackc/pgx
Priority MEDIUM 50
Memory-safety vulnerability in github.com/jackc/pgx/v5.
TI-2026-27208 CVE-2026-34986 · GHSA-78h2-9frx-2jm8
Go JOSE affect by a panic in JWE decryption
Priority MEDIUM 40
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards.
TI-2026-24810 CVE-2026-32281 · GHSA-gjvh-7jh8-7xhm
Inefficient policy validation in crypto/x509
Priority LOW 39
Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service.
TI-2026-24811 CVE-2026-32282 · GHSA-xj38-jxc5-rppx
TOCTOU permits root escape on Linux via Root.Chmod in os in internal/syscall/unix
Priority LOW 30
On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root.