TI-2025-35693 CVE-2025-57810 · GHSA-8mvj-3j78-4qmw
jsPDF Parsing of Corrupt PNGs Leads to Potential Denial of Service (DoS)
Priority HIGH 77
jsPDF is a library to generate PDFs in JavaScript.
RHSA-2026:6226
Multicluster Global Hub 1.6.2 security update
Released 2026-03-31 · Red Hat rating Important · View on Red Hat →
Fixed in
- Multicluster Global Hub 1.6.6 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +2
Fixes 10 records
TI-2025-36412 CVE-2025-58754 · GHSA-4hjh-wcwx-xvwj
Axios is vulnerable to DoS attack through lack of data size check
Priority HIGH 72
Axios is a promise based HTTP client for the browser and Node.js.
TI-2025-41709 CVE-2025-68121 · GHSA-h355-32pf-p2xm
Unexpected session resumption in crypto/tls
Priority MEDIUM 51
During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have…
TI-2025-38128 CVE-2025-61726 · GHSA-gm9r-q53w-2gh4
Memory exhaustion in query parameter parsing in net/url
Priority MEDIUM 43
The net/url package does not set a limit on the number of query parameters in a query.
TI-2025-36904 CVE-2025-59343 · GHSA-vj76-c3g6-qr5v
tar-fs has a symlink validation bypass if destination directory is predictable with a specific tarball
Priority LOW 38
tar-fs provides filesystem bindings for tar-stream.
TI-2026-21964 CVE-2026-27571 · GHSA-qrvq-68c2-7grw
nats-server websockets are vulnerable to pre-auth memory DoS
Priority LOW 34
NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system.
TI-2025-38131 CVE-2025-61729 · GHSA-7c64-f9jr-v9h2
Excessive resource consumption when printing error string for host certificate validation in crypto/x509
Priority LOW 33
Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out.
TI-2025-30311 CVE-2025-47907 · GHSA-j5pm-7495-qmr3
Incorrect results returned from Rows.Scan in database/sql
Priority LOW 31
Cancelling a query (e.g.
TI-2025-38130 CVE-2025-61728 · GHSA-g9q4-qjx4-2v7q
Excessive CPU consumption when building archive index in archive/zip
Priority LOW 30
archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened.
TI-2025-35990 CVE-2025-58183 · GHSA-9gcr-gp5f-jw27
Unbounded allocation when parsing GNU sparse map in archive/tar
Priority LOW 20
tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files.