Red Hat Security Advisory

RHSA-2026:72881

Red Hat Advanced Cluster Management for Kubernetes v2.14.6 security update

Released 2026-09-28 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Advanced Cluster Management for Kubernetes 2.14 registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9, registry.redhat.io/rhacm2/acm-prometheus-rhel9 +3

TI-2026-29801 CVE-2026-41178 · GHSA-5wrp-cwcj-q835

MEDIUM 63

OpenTelemetry-Go is the Go implementation of OpenTelemetry.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00336 Published 2026-06-04 Partial fix · 1.42.0, 1.44.0 CWE-789

TI-2026-26188 CVE-2026-33816 · GHSA-9jj7-4m8r-rfcm

MEDIUM 50

Memory-safety vulnerability in github.com/jackc/pgx/v5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00583 Published 2026-04-07 Partial fix · 5.9.0 CWE-20

TI-2026-40992 CVE-2026-56852 · GHSA-jpjm-c3r5-q96r

LOW 39

A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00475 Published 2026-07-21 Partial fix · 0.39.0 CWE-835

TI-2026-30785 CVE-2026-42502 · GHSA-wrh2-89vg-4j9g

LOW 27

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00223 Published 2026-05-22 Partial fix · 0.55.0 CWE-1021