Skip to content

Vulnerabilities of Red Hat Compliance Operator

Is your version affected?

CVE Summary Score Published
CVE-2026-27145 (*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name… 6.5 Medium Jun 2, 2026
CVE-2026-39821 The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label 9.6 Critical May 22, 2026
CVE-2026-33811 When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a… 7.5 High May 7, 2026
CVE-2026-33814 When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it… 7.5 High May 7, 2026
CVE-2026-27137 When verifying a certificate chain which contains a certificate containing multiple email address constraints which… 7.5 High Mar 6, 2026

Other Red Hat products