TI-2026-30787 CVE-2026-42504 · GHSA-h524-452v-82p9
Quadratic complexity in WordDecoder.DecodeHeader in mime
Priority MEDIUM 40
Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU.
RHSA-2026:91613
Red Hat OpenShift API for Data Protection
Released 2026-10-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- OpenShift API for Data Protection 1.6 registry.redhat.io/oadp/oadp-velero-rhel9
Fixes 3 records
TI-2026-30790 CVE-2026-42507 · GHSA-h3gm-q7m7-mp28
Arbitrary inputs are included in errors without any escaping in net/textproto
Priority LOW 30
When returning errors, functions in the net/textproto package would include its input as part of the error.
TI-2026-21595 CVE-2026-27145 · GHSA-4279-q6mj-392r
Inefficient candidate hostname parsing in crypto/x509
Priority LOW 30
(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries.