Red Hat Security AdvisoryRHSA-2026:24503
Multicluster Global Hub 1.7.1 security update
Released 2026-06-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Multicluster Global Hub 1.7.4 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9
Fixes 12 records
Priority HIGH 72
The package `github.com/gomarkdown/markdown` is a Go library for parsing Markdown text and rendering as HTML.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00346 · Published 2026-04-21 · Fixed in 759bbc3e32073c3bc4e25969c132fc520eda2778, 0.0.0-20260411013819-759bbc3e3207 CWE-125
Priority MEDIUM 52
Moby is an open source container framework.
CVSS 3.1HIGH 8.8· Local · Low privileges · No interaction · EPSS 0.0927 · Published 2026-03-31 · Partial fix · 29.3.1, 2.0.0-beta.8 CWE-288
Priority MEDIUM 50
Memory-safety vulnerability in github.com/jackc/pgx/v5.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00583 · Published 2026-04-07 · Partial fix · 5.9.0 CWE-20
Priority MEDIUM 50
Memory-safety vulnerability in github.com/jackc/pgx/v5.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00629 · Published 2026-04-07 · Partial fix · 5.9.0
Priority MEDIUM 47
Pyroscope is an open-source continuous profiling database.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00407 · Published 2026-04-15 · Partial fix · 1.16.0, 1.15.2 +1 CWE-732
Priority MEDIUM 41
Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue affects Apache Thrift: before 0.23.0.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01163 · Published 2026-04-28 · Partial fix · 0.23.0 CWE-190
Priority MEDIUM 40
Tempo queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00637 · Published 2026-04-24 · Partial fix · 2.8.4, 2.9.2 +1 CWE-400
Priority LOW 39
Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift.
CVSS 3.1HIGH 7.3· Network · No auth · No interaction · EPSS 0.00632 · Published 2026-05-05 · Partial fix · 0.23.0 CWE-297
Priority LOW 39
Parsing a WEBP image with an invalid, large size panics on 32-bit platforms.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0034 · Published 2026-04-21 · Partial fix · 0.42.0
Priority LOW 39
Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00361 · Published 2026-04-08 · Partial fix · 1.25.9, 1.26.2 CWE-295
Priority LOW 35
OpenFGA is an authorization/permission engine built for developers.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00287 · Published 2026-04-17 · Partial fix · 1.14.0 CWE-200
Priority LOW 30
On Linux, if the target of Root.Chmod is replaced with a symlink while the chmod operation is in progress, Chmod can operate on the target of the symlink, even when the target lies outside the root.
CVSS 3.1MEDIUM 6.4· Local · High privileges · No interaction · EPSS 0.00297 · Published 2026-04-08 · Partial fix · 1.25.9, 1.26.2 CWE-59
THREATIST.IORead the docs