جزئیات آسیب‌پذیری
CVE-2026-34986
Red Hat Assisted Installer for Red Hat OpenShift Container Platform 2Red Hat Confidential Compute AttestationRed Hat Kernel Module Management Operator for Red Hat OpenshiftRed Hat Logging Subsystem for Red Hat OpenShiftRed Hat Migration Toolkit for VirtualizationRed Hat Multicluster Engine for Kubernetes
Go JOSE affect by a panic in JWE decryption
CVSS 3.1
7.5بالا
شرح رسمی (انگلیسی)
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.4 and 3.0.5, decrypting a JSON Web Encryption (JWE) object will panic if the alg field indicates a key wrapping algorithm (one ending in KW, with the exception of A128GCMKW, A192GCMKW, and A256GCMKW) and the encrypted_key field is empty. The panic happens when cipher.KeyUnwrap() in key_wrap.go attempts to allocate a slice with a zero or negative length based on the length of the encrypted_key. This code path is reachable from ParseEncrypted() / ParseEncryptedJSON() / ParseEncryptedCompact() followed by Decrypt() on the resulting object. Note that the parse functions take a list of accepted key algorithms. If the accepted key algorithms do not include any key wrapping algorithms, parsing will fail and the application will be unaffected. This panic is also reachable by calling cipher.KeyUnwrap() directly with any ciphertext parameter less than 16 bytes long, but calling this function directly is less common. Panics can lead to denial of service. This vulnerability is fixed in 4.1.4 and 3.0.5.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 7.5بالا | 3.1 | CVEProject cvelistV5 (CNA) (GitHub_M) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| 7.5بالا | 3.1 | CVEProject cvelistV5 (CNA) (redhat-SADP) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Red Hat | Assisted Installer for Red Hat OpenShift Container Platform 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Assisted Installer for Red Hat OpenShift Container Platform 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Assisted Installer for Red Hat OpenShift Container Platform 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Confidential Compute Attestation | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Kernel Module Management Operator for Red Hat Openshift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Logging Subsystem for Red Hat OpenShift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Logging Subsystem for Red Hat OpenShift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Logging Subsystem for Red Hat OpenShift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Logging Subsystem for Red Hat OpenShift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Logging Subsystem for Red Hat OpenShift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Logging Subsystem for Red Hat OpenShift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Migration Toolkit for Virtualization | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Migration Toolkit for Virtualization | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Engine for Kubernetes | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Multicluster Global Hub | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Developer Tools and Services | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Developer Tools and Services | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Developer Tools and Services | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Developer Tools and Services | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Lightspeed | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Pipelines | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Serverless | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Service Mesh 3 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | OpenShift Service Mesh 3 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Ansible Automation Platform 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Ansible Automation Platform 2 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Build of Podman Desktop | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Build of Podman Desktop | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Build of Podman Desktop - Tech Preview | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Build of Podman Desktop - Tech Preview | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Connectivity Link 1 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 10 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 10 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 10 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 10 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 9 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 9 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 9 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Enterprise Linux 9 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift AI (RHOAI) | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Cluster Manager CLI | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift GitOps | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift GitOps | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift GitOps | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift GitOps | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift on AWS | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Openshift Data Foundation 4 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Quay 3 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Quay 3 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Quay 3 | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Trusted Artifact Signer | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Trusted Artifact Signer | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat Trusted Artifact Signer | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Security Profiles Operator | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Security Profiles Operator | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Zero Trust Workload Identity Manager - Tech Preview | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Zero Trust Workload Identity Manager - Tech Preview | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Zero Trust Workload Identity Manager - Tech Preview | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Zero Trust Workload Identity Manager - Tech Preview | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | Zero Trust Workload Identity Manager - Tech Preview | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | cert-manager Operator for Red Hat OpenShift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | cert-manager Operator for Red Hat OpenShift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | cert-manager Operator for Red Hat OpenShift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | cert-manager Operator for Red Hat OpenShift | همه | CVEProject cvelistV5 (CNA) |
| Red Hat | cert-manager Operator for Red Hat OpenShift | همه | CVEProject cvelistV5 (CNA) |
| go-jose | go-jose | < 3.0.5 | CVEProject cvelistV5 (CNA) |
| go-jose | go-jose | >= 4.0.0, < 4.1.4 | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۱۵۰- https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8 x_refsource_CONFIRM
- https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants x_refsource_MISC
- https://access.redhat.com/security/cve/CVE-2026-34986 vdb-entryx_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2455470 issue-trackingx_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34986.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:65906 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:65838 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:62548 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:66385 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:17789 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:60452 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:60444 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:60449 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:20569 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19719 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:27856 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:17040 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:16696 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22937 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19135 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22450 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19017 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:33722 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:35833 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:48790 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:49944 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:25252 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:25248 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:25250 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:34192 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:32991 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:34196 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:34197 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19721 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:20607 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19720 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26054 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:17287 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:20609 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10135 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19186 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:23228 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19353 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22714 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19173 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26636 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:57590 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:34364 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:47952 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26585 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22423 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22347 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:23345 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:51033 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:29854 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26568 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:25127 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:11070 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:11217 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:13791 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:13829 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:41928 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:24977 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19712 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:62550 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:60023 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:34099 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:17598 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:57487 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:27001 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:17448 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:57408 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:27004 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:20041 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:27063 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:48676 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:21703 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:25194 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:17468 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:25187 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:44267 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:21709 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:23241 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:27044 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:20034 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54602 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:17474 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:34794 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:25206 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10175 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36820 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:62260 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:20946 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:24484 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:21932 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:21931 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:11688 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:9448 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:8490 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:9453 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:8491 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:8493 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:9388 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:9385 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:17550 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:56431 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:41941 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:17547 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:41944 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:56366 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:12279 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:12277 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:57013 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40984 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:56968 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37387 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:11916 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22840 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:11856 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22629 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:21017 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:24853 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19375 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22465 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:48085 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:23361 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:11996 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10125 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:10130 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:24475 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:24482 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:24479 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:24477 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:24471 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:21769 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19108 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:12116 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:19099 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:46885 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:28198 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:17459 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:17458 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:11512 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:17123 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22258 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:17121 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22260 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:30650 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:18584 vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:18585 vendor-advisoryx_refsource_REDHAT
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۱/۱۷
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۶/۲۷
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- GitHub_M
پیش‌بینی بهره‌برداری (EPSS)
۰٫۶۶٪
احتمال بهره‌برداری در ۳۰ روز
۵۱٫۸٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- بله
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- جزئی
ضعف‌ها (CWE)
- CWE-248Uncaught Exception
- CWE-131Incorrect Calculation of Buffer Size