TI-2026-51613 CVE-2026-73501
kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc Default
Priority HIGH 80
kin-openapi is a Go project for handling OpenAPI files.
RHSA-2026:94612
Red Hat Edge Manager Version 1.2.2 Security Update
Released 2026-11-03 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Edge Manager 1.2 registry.redhat.io/rhem/flightctl-alert-exporter-rhel10, registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10, registry.redhat.io/rhem/flightctl-api-rhel10 +11
Fixes 8 records
TI-2026-53976 CVE-2026-77354 · GHSA-xhj3-7xw9-vr34
kin-openapi: Uncontrolled resource consumption in openapi3filter deepObject query parameter decoding
Priority HIGH 77
kin-openapi is a Go project for handling OpenAPI files.
TI-2026-51614 CVE-2026-73502 · GHSA-jpcw-4wr7-c3vq
NULL pointer dereference in getkin kin-openapi
Priority MEDIUM 57
kin-openapi is a Go project for handling OpenAPI files.
TI-2026-58035 CVE-2026-84445 · GHSA-2v4p-qf9q-27wj
gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers
Priority MEDIUM 45
gRPC-Go is the Go language implementation of gRPC.
TI-2026-65313 CVE-2026-102278 · GHSA-qhr7-859c-m2p7
brace-expansion: DoS via uncontrolled recursion on nested brace groups causing stack exhaustion
Priority LOW 39
The brace-expansion library generates arbitrary strings containing a common prefix and suffix.
TI-2026-65311 CVE-2026-102276 · GHSA-6j4f-fj2g-mc7p
brace-expansion: DoS via uncontrolled recursion in parseCommaParts causing stack exhaustion
Priority LOW 39
The brace-expansion library generates arbitrary strings containing a common prefix and suffix.
TI-2026-62466 CVE-2026-92615 · GHSA-q6r7-r3xg-x977
Flightctl: flightctl: package-global go-git https transport mutated per-repo -- cross-tenant tls-config bleed
Priority LOW 29
A flaw was found in flightctl.
TI-2026-60056 CVE-2026-88031 · GHSA-gf3f-xg7m-h8wp
GridFS data deletion via query-operator injection in file IDs in the MongoDB Go Driver
Priority LOW 28
Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Go Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than a…