RHSA-2026:72570

go-openapi/swag jsonutils before 0.27.1 contains a stack overflow vulnerability in ordered JSON parsing and serialization due to unbounded recursion with no depth limit.

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON.

compress provides various compression algorithms.

The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer.

Loki queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy.