TI-2026-58035 CVE-2026-84445 · GHSA-2v4p-qf9q-27wj
gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers
Priority MEDIUM 45
gRPC-Go is the Go language implementation of gRPC.
RHSA-2026:89081
Red Hat OpenShift Builds 1.8.3
Released 2026-10-24 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat OpenShift Builds 1.8.3 registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9, registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9 +6
Fixes 8 records
TI-2026-69840 CVE-2026-97031 · GHSA-hq7w-2xrq-wp2j
Memory exhaustion in Go crypto/tls via malformed ECH extensions
Priority MEDIUM 40
Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references…
Priority MEDIUM 40
A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW_SIZE values.
TI-2026-69827 CVE-2026-78667 · GHSA-f4xw-m386-m277
Excessive CPU use in Go net/http when parsing Range headers
Priority MEDIUM 40
When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) can consume an excessive amount of CPU.
TI-2026-34259 CVE-2026-46600 · GHSA-gg3m-vvp2-p2c5
Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessage
Priority MEDIUM 40
Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer.
TI-2026-69257 CVE-2026-56851 · GHSA-gx9w-9qq8-m485
Panic in golang.org/x/text Nickname profile parsing crafted input
Priority LOW 39
The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer.
TI-2026-79000 CVE-2026-114406 · GHSA-jrx5-4fv3-4mcq
Red Hat system CA store trusts weak eMudhra intermediate certificates
Priority LOW 32
The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak pr…
Priority LOW 32
On most platforms, Go uses the given system root certificates.