TI-2026-58035 CVE-2026-84445 · GHSA-2v4p-qf9q-27wj
gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers
Priority MEDIUM 45
gRPC-Go is the Go language implementation of gRPC.
RHSA-2026:75689
rhc-worker-script security update
Released 2026-10-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server (v. 7 ELS) rhc-worker-script-0.12-1.el7_9
Fixes 4 records
TI-2026-40999 CVE-2026-56862 · GHSA-7qch-w8m5-g3h3
Limit handshake messages we are willing to accept post-handshake in crypto/tls
Priority MEDIUM 40
Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not.
TI-2026-26189 CVE-2026-33818 · GHSA-xc2p-8ggw-6cr5
Enforce maximum recursion depth in encoding/asn1
Priority MEDIUM 40
Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures.
TI-2026-40996 CVE-2026-56858 · GHSA-c974-w86c-vpfw
Fix Javascript regexp context tracking in html/template
Priority LOW 27
Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS.