Vulnérabilités connues pour Red Hat Multicluster Global Hub

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-110744	A flaw was found in multicluster-global-hub-operator-bundle	7.2 Élevée	21 oct. 2026
CVE-2026-83550	A flaw was found in postgres-exporter	7.1 Élevée	6 oct. 2026
CVE-2026-66792	A flaw was found in the multicloud-operators-subscription component	9.9 Critique	17 août 2026
CVE-2026-71577	A flaw was found in multicluster-global-hub	6.3 Moyenne	10 août 2026
CVE-2026-71576	A flaw was found in multicluster-global-hub	8.5 Élevée	10 août 2026
CVE-2026-41567	Moby is an open source container framework	7.2 Élevée	5 juin 2026
CVE-2026-27145	(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name…	6.5 Moyenne	2 juin 2026
CVE-2026-46385	iskorotkov/avro is a fast Go Avro codec	8.7 Élevée	29 mai 2026
CVE-2026-46384	iskorotkov/avro is a fast Go Avro codec	8.7 Élevée	29 mai 2026
CVE-2026-39821	The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label	9.6 Critique	22 mai 2026
CVE-2026-33811	When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a…	7.5 Élevée	7 mai 2026
CVE-2026-39820	Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion…	7.5 Élevée	7 mai 2026
CVE-2026-42499	Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322	7.5 Élevée	7 mai 2026
CVE-2026-33814	When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it…	7.5 Élevée	7 mai 2026
CVE-2026-43869	Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift	Non notée	5 mai 2026
CVE-2026-42154	Prometheus is an open-source monitoring system and time series database	7.5 Élevée	4 mai 2026
CVE-2026-42151	Prometheus is an open-source monitoring system and time series database	7.5 Élevée	4 mai 2026
CVE-2025-14576	Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading…	7.4 Élevée	30 avr. 2026
CVE-2026-41602	Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue…	Non notée	28 avr. 2026
CVE-2025-48431	Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings	Non notée	28 avr. 2026
CVE-2026-21728	Tempo queries with large limits can cause large memory allocations which can impact the availability of the service,…	7.5 Élevée	24 avr. 2026
CVE-2025-41118	Pyroscope is an open-source continuous profiling database	9.1 Critique	15 avr. 2026
CVE-2026-33815	Memory-safety vulnerability in github.com/jackc/pgx/v5	9.8 Critique	7 avr. 2026
CVE-2026-33816	Memory-safety vulnerability in github.com/jackc/pgx/v5	9.8 Critique	7 avr. 2026
CVE-2026-34986	Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including…	7.5 Élevée	6 avr. 2026

Autres produits Red Hat