TI-2026-29801 CVE-2026-41178 · GHSA-5wrp-cwcj-q835
OpenTelemetry-Go's baggage parsing no longer caps raw header length
Priority MEDIUM 63
OpenTelemetry-Go is the Go implementation of OpenTelemetry.
RHSA-2026:92515
Logging for Red Hat OpenShift - 6.6.2
Released 2026-10-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Logging Subsystem for Red Hat OpenShift 6.6 registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator, registry.redhat.io/openshift-logging/logging-loki-rhel9, registry.redhat.io/openshift-logging/loki-rhel9-operator +2
Fixes 6 records
TI-2026-58035 CVE-2026-84445 · GHSA-2v4p-qf9q-27wj
gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers
Priority MEDIUM 45
gRPC-Go is the Go language implementation of gRPC.
TI-2026-54101 CVE-2026-77619
Vector: Unauthenticated denial of service in the `logstash` source via unbounded memory allocation.
Priority MEDIUM 44
Vector is a high-performance observability data pipeline.
TI-2026-45095 CVE-2026-63209 · GHSA-259r-337f-4rfw
Integer Overflow or Wraparound and Out-of-bounds Write in compress
Priority MEDIUM 40
compress provides various compression algorithms.
TI-2026-30782 CVE-2026-42499 · GHSA-xq5j-9r39-c3vf
Quadratic string concatenation in consumePhrase in net/mail
Priority MEDIUM 40
Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.
TI-2026-57939 CVE-2026-84304 · GHSA-vp52-pcj8-j9qc
gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation
Priority LOW 39
gRPC-Go is the Go language implementation of gRPC.