Vulnérabilités de Red Hat Red Hat OpenShift distributed tracing 3.9.3

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-41607	Out-of-bounds Read vulnerability in Apache Thrift	Non notée	28 avr. 2026
CVE-2026-41606	Uncontrolled Recursion vulnerability in Apache Thrift	Non notée	28 avr. 2026
CVE-2026-41605	Integer Overflow or Wraparound vulnerability in Apache Thrift	Non notée	28 avr. 2026
CVE-2026-41604	Out-of-bounds Read vulnerability in Apache Thrift	Non notée	28 avr. 2026
CVE-2026-41603	Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift	Non notée	28 avr. 2026
CVE-2026-41602	Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue…	Non notée	28 avr. 2026
CVE-2026-4878	Libcap: libcap: privilege escalation via toctou race condition in cap_set_file()	6.7 Moyenne	9 avr. 2026
CVE-2026-32280	During chain building, the amount of work that is done is not correctly limited when a large number of intermediate…	7.5 Élevée	8 avr. 2026
CVE-2026-32283	If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection…	7.5 Élevée	8 avr. 2026
CVE-2026-33810	When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to…	7.5 Élevée	8 avr. 2026
CVE-2026-34986	Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including…	7.5 Élevée	6 avr. 2026
CVE-2026-4800	The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same…	8.1 Élevée	31 mars 2026
CVE-2026-32285	The Delete function fails to properly validate offsets when processing malformed JSON input	7.5 Élevée	26 mars 2026
CVE-2026-4926	Impact: A bad regular expression is generated any time you have multiple sequential optional groups (curly brace…	7.5 Élevée	26 mars 2026
CVE-2026-33186	gRPC-Go is the Go language implementation of gRPC	9.1 Critique	20 mars 2026
CVE-2026-25679	url.Parse insufficiently validated the host/authority component and accepted some invalid URLs	7.5 Élevée	6 mars 2026
CVE-2026-27137	When verifying a certificate chain which contains a certificate containing multiple email address constraints which…	7.5 Élevée	6 mars 2026
CVE-2025-61726	The net/url package does not set a limit on the number of query parameters in a query	7.5 Élevée	28 janv. 2026

Autres produits Red Hat