TI-2025-07108 CVE-2025-7783 · GHSA-fjxv-7rqg-78g4
Usage of unsafe random function in form-data for choosing boundary
Priority HIGH 76
Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP).
RHSA-2026:59439
RHTAS 1.3.7 - Red Hat Trusted Artifact Signer Release
Released 2026-08-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Trusted Artifact Signer 1.3 registry.redhat.io/rhtas/certificate-transparency-rhel9, registry.redhat.io/rhtas/fulcio-rhel9, registry.redhat.io/rhtas/rekor-backfill-redis-rhel9 +5
Fixes 5 records
TI-2026-42684 CVE-2026-59869 · GHSA-52cp-r559-cp3m
js-yaml: YAML merge-key chains can force quadratic CPU consumption
Priority HIGH 72
js-yaml is a JavaScript YAML parser and dumper.
TI-2026-35984 CVE-2026-48702 · GHSA-47q9-m4ww-924m
Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic
Priority LOW 39
Rekor is a software supply chain transparency log.
TI-2025-30311 CVE-2025-47907 · GHSA-j5pm-7495-qmr3
Incorrect results returned from Rows.Scan in database/sql
Priority LOW 31
Cancelling a query (e.g.
TI-2024-08679 CVE-2024-9355 · GHSA-3h3x-2hwv-hr52
Golang-fips: golang fips zeroed buffer
Priority LOW 31
A vulnerability was found in Golang FIPS OpenSSL.