7.5
High
CVE-2026-32285 The Delete function fails to properly validate offsets when processing malformed JSON input
Description
The Delete function fails to properly validate offsets when processing malformed JSON input. This can lead to a negative slice index and a runtime panic, allowing a denial of service attack.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| github.com/buger/jsonparser 1.1 | earliest → < 1.1.2 | 1.1.2 |
| Multicluster Global Hub 1.3.4 1779212259 | earliest → < 1779212259 | 1779212259 |
| Multicluster Global Hub 1.4.5 1779579439 | earliest → < 1779579439 | 1779579439 |
| Multicluster Global Hub 1.5.4 1778867753 | earliest → < 1778867753 | 1778867753 |
| Multicluster Global Hub 1.6.2 1780167118 | earliest → < 1780167118 | 1780167118 |
| Red Hat Advanced Cluster Management for Kubernetes 2.15 1777142269 | earliest → < 1777142269 | 1777142269 |
| Red Hat Hardened Images 1.42 | earliest → < 1.42.4-0.1.hum1 | 1.42.4-0.1.hum1 |
| Red Hat OpenShift distributed tracing 3.9.3 1776435680 | earliest → < 1776435680 | 1776435680 |
| multicluster engine for Kubernetes 2.10 1779135478 | earliest → < 1779135478 | 1779135478 |
Show the 26 other branches Hide the 26 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| multicluster engine for Kubernetes 2.8 1778288646 | earliest → < 1778288646 | 1778288646 |
| Logging Subsystem for Red Hat OpenShift | Versions not published | |
| Red Hat OpenShift GitOps | Versions not published | |
| Red Hat Ansible Automation Platform 2 | Versions not published | |
| Red Hat OpenShift Container Platform 4 | Versions not published | |
| Red Hat OpenShift for Windows Containers | Versions not published | |
| Red Hat OpenStack Platform 18.0 | Versions not published | |
| Logging Subsystem for Red Hat OpenShift 6.4 1782405469 | earliest → < 1782405469 | 1782405469 |
| Red Hat Advanced Cluster Management for Kubernetes 2.14 1782693386 | earliest → < 1782693386 | 1782693386 |
| multicluster engine for Kubernetes 2.1 1779135478 | earliest → < 1779135478 | 1779135478 |
| Red Hat multicluster global hub 1.4.3 1779579439 | earliest → < 1779579439 | 1779579439 |
| Red Hat multicluster global hub 1.5.2 1778867753 | earliest → < 1778867753 | 1778867753 |
| Red Hat OpenShift distributed tracing 3.9.1 1776435680 | earliest → < 1776435680 | 1776435680 |
| Multicluster Global Hub 1.5.6 1778867753 | earliest → < 1778867753 | 1778867753 |
| Red Hat multicluster global hub 1.4.4 1779579439 | earliest → < 1779579439 | 1779579439 |
| Red Hat multicluster global hub 1.6.0 1780167118 | earliest → < 1780167118 | 1780167118 |
| Red Hat OpenShift distributed tracing 3.9.2 1776435680 | earliest → < 1776435680 | 1776435680 |
| Red Hat OpenShift distributed tracing 3.9.0 1776435680 | earliest → < 1776435680 | 1776435680 |
| Logging for Red Hat OpenShift 6.4 1782405469 | earliest → < 1782405469 | 1782405469 |
| Red Hat multicluster global hub 1.5.0 1778867753 | earliest → < 1778867753 | 1778867753 |
| Multicluster Global Hub 1.5.7 1778867753 | earliest → < 1778867753 | 1778867753 |
| Multicluster Global Hub 1.6.5 1780167118 | earliest → < 1780167118 | 1780167118 |
| Red Hat multicluster global hub 1.4.2 1779579439 | earliest → < 1779579439 | 1779579439 |
| Red Hat multicluster global hub 1.5.1 1778867753 | earliest → < 1778867753 | 1778867753 |
| Cluster Observability Operator 1.5.0 1787593705 | earliest → < 1787593705 | 1787593705 |
| Red Hat multicluster global hub 1.5.3 1778867753 | earliest → < 1778867753 | 1778867753 |
References
- github.com github.com
- github.com github.com
- pkg.go.dev pkg.go.dev
Timeline
- Published
- Last modified