TI-2026-40992 CVE-2026-56852 · GHSA-jpjm-c3r5-q96r
Infinite loop on invalid input in golang.org/x/text
Priority LOW 39
A norm.Iter can enter an infinite loop when handling input containing invalid UTF-8 bytes.
RHSA-2026:94074
Red Hat Web Terminal Operator 1.14.2 release.
Released 2026-11-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Web Terminal 1.14 registry.redhat.io/web-terminal/web-terminal-exec-rhel9, registry.redhat.io/web-terminal/web-terminal-rhel9-operator, registry.redhat.io/web-terminal/web-terminal-tooling-rhel9
Fixes 6 records
TI-2026-50128 CVE-2026-71556 · GHSA-hc8v-wwc9-vgxm
go-git: Worktree operations may follow symlinks
Priority LOW 31
go-git is an extensible git implementation library written in pure Go.
TI-2025-30311 CVE-2025-47907 · GHSA-j5pm-7495-qmr3
Incorrect results returned from Rows.Scan in database/sql
Priority LOW 31
Cancelling a query (e.g.
TI-2026-32627 CVE-2026-44740 · GHSA-m3xc-h892-ggx6
go-billy: Lack of depth and cycle detection in symlink resolution may lead to infinite loops and resource exhaustion
Priority LOW 29
Billy is an interface filesystem abstraction for Go.
TI-2024-30406 CVE-2024-45336 · GHSA-7wrw-r4p8-38rx
Sensitive headers incorrectly sent after cross-domain redirect in net/http
Priority LOW 28
The HTTP client drops sensitive headers after following a cross-domain redirect.
TI-2025-16738 CVE-2025-22866 · GHSA-3whm-j4xm-rv8x
Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec
Priority LOW 19
Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture.