Aller au contenu

Vulnérabilités de Red Hat Multicluster Global Hub 1.3.4

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-43869 Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Non notée 5 mai 2026
CVE-2026-41607 Out-of-bounds Read vulnerability in Apache Thrift Non notée 28 avr. 2026
CVE-2026-41606 Uncontrolled Recursion vulnerability in Apache Thrift Non notée 28 avr. 2026
CVE-2026-41605 Integer Overflow or Wraparound vulnerability in Apache Thrift Non notée 28 avr. 2026
CVE-2026-41604 Out-of-bounds Read vulnerability in Apache Thrift Non notée 28 avr. 2026
CVE-2026-41603 Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Non notée 28 avr. 2026
CVE-2026-41602 Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue… Non notée 28 avr. 2026
CVE-2026-21728 Tempo queries with large limits can cause large memory allocations which can impact the availability of the service,… 7.5 Élevée 24 avr. 2026
CVE-2026-32283 If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection… 7.5 Élevée 8 avr. 2026
CVE-2026-33815 Memory-safety vulnerability in github.com/jackc/pgx/v5 9.8 Critique 7 avr. 2026
CVE-2026-33816 Memory-safety vulnerability in github.com/jackc/pgx/v5 9.8 Critique 7 avr. 2026
CVE-2026-34986 Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including… 7.5 Élevée 6 avr. 2026
CVE-2026-32285 The Delete function fails to properly validate offsets when processing malformed JSON input 7.5 Élevée 26 mars 2026
CVE-2026-32286 The DataRow.Decode function fails to properly validate field lengths 7.5 Élevée 26 mars 2026
CVE-2026-33487 goxmlsig provides XML Digital Signatures implemented in Go 7.5 Élevée 26 mars 2026
CVE-2026-33186 gRPC-Go is the Go language implementation of gRPC 9.1 Critique 20 mars 2026
CVE-2026-25679 url.Parse insufficiently validated the host/authority component and accepted some invalid URLs 7.5 Élevée 6 mars 2026
CVE-2026-27137 When verifying a certificate chain which contains a certificate containing multiple email address constraints which… 7.5 Élevée 6 mars 2026

Autres produits Red Hat