Vulnerabilities of Red Hat Multicluster Global Hub

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-110744	A flaw was found in multicluster-global-hub-operator-bundle	7.2 High	Oct 21, 2026
CVE-2026-83550	A flaw was found in postgres-exporter	7.1 High	Oct 6, 2026
CVE-2026-66792	A flaw was found in the multicloud-operators-subscription component	9.9 Critical	Aug 17, 2026
CVE-2026-71577	A flaw was found in multicluster-global-hub	6.3 Medium	Aug 10, 2026
CVE-2026-71576	A flaw was found in multicluster-global-hub	8.5 High	Aug 10, 2026
CVE-2026-41567	Moby is an open source container framework	7.2 High	Jun 5, 2026
CVE-2026-27145	(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name…	6.5 Medium	Jun 2, 2026
CVE-2026-46385	iskorotkov/avro is a fast Go Avro codec	8.7 High	May 29, 2026
CVE-2026-46384	iskorotkov/avro is a fast Go Avro codec	8.7 High	May 29, 2026
CVE-2026-39821	The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label	9.6 Critical	May 22, 2026
CVE-2026-33811	When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a…	7.5 High	May 7, 2026
CVE-2026-39820	Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion…	7.5 High	May 7, 2026
CVE-2026-42499	Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322	7.5 High	May 7, 2026
CVE-2026-33814	When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it…	7.5 High	May 7, 2026
CVE-2026-43869	Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift	Not rated	May 5, 2026
CVE-2026-42154	Prometheus is an open-source monitoring system and time series database	7.5 High	May 4, 2026
CVE-2026-42151	Prometheus is an open-source monitoring system and time series database	7.5 High	May 4, 2026
CVE-2025-14576	Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading…	7.4 High	Apr 30, 2026
CVE-2026-41602	Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue…	Not rated	Apr 28, 2026
CVE-2025-48431	Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings	Not rated	Apr 28, 2026
CVE-2026-21728	Tempo queries with large limits can cause large memory allocations which can impact the availability of the service,…	7.5 High	Apr 24, 2026
CVE-2025-41118	Pyroscope is an open-source continuous profiling database	9.1 Critical	Apr 15, 2026
CVE-2026-33815	Memory-safety vulnerability in github.com/jackc/pgx/v5	9.8 Critical	Apr 7, 2026
CVE-2026-33816	Memory-safety vulnerability in github.com/jackc/pgx/v5	9.8 Critical	Apr 7, 2026
CVE-2026-34986	Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including…	7.5 High	Apr 6, 2026

Other Red Hat products