Red Hat Security AdvisoryRHSA-2026:72489
Red Hat Hardened Images RPMs Security Update
Released 2026-09-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Hardened Images spire1.14-1.14.7-0.5.hum1@aarch64, spire1.14-1.14.7-0.5.hum1@src, spire1.14-1.14.7-0.5.hum1@x86_64 +6
Fixes 2 records
Priority HIGH 77
go-openapi/swag jsonutils before 0.27.1 contains a stack overflow vulnerability in ordered JSON parsing and serialization due to unbounded recursion with no depth limit.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.01318 · Published 2026-09-17 · Partial fix · 0.27.1 CWE-674
Priority MEDIUM 41
The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01262 · Published 2024-03-05 · Partial fix · 1.33.0 CWE-835