TI-2026-40371 CVE-2026-55969 · GHSA-x8jh-qfcv-fp29
Integer overflow in Apache Thrift
Priority MEDIUM 46
Integer Overflow or Wraparound vulnerability in Apache Thrift C++, c_glib, Go, netstd, Delphi and Haxe bindings.
RHSA-2026:72880
Red Hat Advanced Cluster Management for Kubernetes v2.16.6 security update
Released 2026-09-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Advanced Cluster Management for Kubernetes 2.16 registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/console-rhel9, registry.redhat.io/rhacm2/submariner-addon-rhel9
Fixes 7 records
TI-2026-35942 CVE-2026-48586 · GHSA-6h9h-5c4r-fqgf
Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift…
Priority MEDIUM 46
Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings.
TI-2026-53157 CVE-2026-75931 · GHSA-5jgf-p345-68v8
fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references
Priority LOW 39
fast-uri is a URI parser for Node.js.
TI-2026-53285 CVE-2026-76172 · GHSA-jqff-g426-hqxp
fast-uri vulnerable to host confusion via percent-encoded scheme normalization
Priority LOW 38
fast-uri is a URI parser for Node.js.
TI-2026-53188 CVE-2026-75975 · GHSA-f65p-4m7j-42xc
fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization
Priority LOW 38
fast-uri is a URI parser for Node.js.
TI-2026-53132 CVE-2026-75899 · GHSA-fph4-wmhf-6fwf
fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding
Priority LOW 38
fast-uri is a URI parser for Node.js.
TI-2026-47425 CVE-2026-66780 · GHSA-3xmh-phwc-5f4g
Submariner-operator: broker serviceaccount secret (token + ca) logged in full at trace verbosity
Priority LOW 32
A flaw was found in the submariner-operator component.