RHSA-2026%3A12282

RHSA-2026%3A12282 PUBLISHED CVSS 5.400000095367432 MEDIUM

A flaw was found in the net/http golang package. The net/http package incorrectly accepts messages that end with a line feed (LF) instead of the proper line ending. When used with another server that also misinterprets this, it can lead to request smuggling—where an attacker tricks the system to send hidden or unauthorized requests.

Risk Scores

CVSS 3.1

5.400000095367432

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N

Affected Products

…and 176 more

Timeline

May 6, 2026 CVE Published
May 9, 2026 Distribution Patch
May 9, 2026 Security Advisory
May 9, 2026 Security Advisory
May 10, 2026 Security Advisory
May 11, 2026 Security Advisory
May 15, 2026 Distribution Patch
May 15, 2026 Security Advisory
May 19, 2026 Security Advisory
May 28, 2026 Security Advisory
May 28, 2026 Security Advisory
Jul 29, 2026 CVE Updated

References

https://access.redhat.com/security/cve/CVE-2025-68121 advisory
https://www.cve.org/CVERecord?id=CVE-2025-61731 advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2437016 issue
https://www.cve.org/CVERecord?id=CVE-2025-61732 advisory
https://pkg.go.dev/vuln/GO-2026-4337 advisory
https://access.redhat.com/security/cve/CVE-2025-61726 advisory
https://www.cve.org/CVERecord?id=CVE-2025-61726 advisory
https://github.com/sirupsen/logrus/releases/tag/v1.8.3 advisory
https://access.redhat.com/errata/RHSA-2026:12282 advisory
https://access.redhat.com/security/cve/CVE-2025-61732 advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-61728 advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2434433 issue
https://go.dev/cl/736711 advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-65637 advisory
https://github.com/mjuanxd/logrus-dos-poc/blob/main/README.md exploit
https://go.dev/cl/736712 advisory
https://pkg.go.dev/vuln/GO-2026-4342 advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-61731 advisory
https://www.cve.org/CVERecord?id=CVE-2025-65637 advisory
https://go.dev/cl/736713 advisory

…and 48 more

Open in Interactive Console →

Vendor	Product	Versions
Red Hat	registry.redhat.io/openshift4/ose-deployer@sha256:5db949e486796824aa831027be65199f34e041c07f602ca43848ced92f516146_amd64 as a component of Red Hat OpenShift Container Platform 4.12	, registry.redhat.io/openshift4/ose-deployer@sha256:5db949e486796824aa831027be65199f34e041c07f602ca43848ced92f516146_amd64,
Red Hat	registry.redhat.io/openshift4/ose-console@sha256:0059bcc5702d689d40be5736b0872222231e6585a8873e7937b3faffee5cdc6c_amd64 as a component of Red Hat OpenShift Container Platform 4.12	registry.redhat.io/openshift4/ose-console@sha256:0059bcc5702d689d40be5736b0872222231e6585a8873e7937b3faffee5cdc6c_amd64, *, registry.redhat.io/openshift4/ose-console@sha256:0059bcc5702d689d40be5736b0872222231e6585a8873e7937b3faffee5cdc6c_amd64
Red Hat	registry.redhat.io/openshift4/ose-ironic-agent-rhel9@sha256:a223892726dfb8775c4cded5ddc3a58d8011b859fcb99e14176bf395c01f8f69_amd64 as a component of Red Hat OpenShift Container Platform 4.12	, , *
Red Hat	registry.redhat.io/openshift4/ose-cluster-bootstrap@sha256:df9dbc198769ac0612b056c05e5e4e34bebc60fe2b150d126e7b5007951d2d22_amd64 as a component of Red Hat OpenShift Container Platform 4.12	, , registry.redhat.io/openshift4/ose-cluster-bootstrap@sha256:df9dbc198769ac0612b056c05e5e4e34bebc60fe2b150d126e7b5007951d2d22_amd64
Red Hat	registry.redhat.io/openshift4/driver-toolkit-rhel8@sha256:d6d93a43fe65063401165886c38eebed441c77639950e8d41e640cda98fe5f34_amd64 as a component of Red Hat OpenShift Container Platform 4.12	*, registry.redhat.io/openshift4/driver-toolkit-rhel8@sha256:d6d93a43fe65063401165886c38eebed441c77639950e8d41e640cda98fe5f34_amd64, registry.redhat.io/openshift4/driver-toolkit-rhel8@sha256:d6d93a43fe65063401165886c38eebed441c77639950e8d41e640cda98fe5f34_amd64
Red Hat	registry.redhat.io/openshift4/ose-k8s-prometheus-adapter@sha256:b6622ea295238f6701ce95f1f904579a336883750c3b22941a8cc7478b8e5da0_amd64 as a component of Red Hat OpenShift Container Platform 4.12	registry.redhat.io/openshift4/ose-k8s-prometheus-adapter@sha256:b6622ea295238f6701ce95f1f904579a336883750c3b22941a8cc7478b8e5da0_amd64, *, registry.redhat.io/openshift4/ose-k8s-prometheus-adapter@sha256:b6622ea295238f6701ce95f1f904579a336883750c3b22941a8cc7478b8e5da0_amd64
Red Hat	registry.redhat.io/openshift4/ose-openstack-cloud-controller-manager-rhel8@sha256:dc0c1ceb92db106c56b07f6da3e7f446be33acb1520d033df3924ac73065bcba_amd64 as a component of Red Hat OpenShift Container Platform 4.12	, , registry.redhat.io/openshift4/ose-openstack-cloud-controller-manager-rhel8@sha256:dc0c1ceb92db106c56b07f6da3e7f446be33acb1520d033df3924ac73065bcba_amd64
Red Hat	registry.redhat.io/openshift4/ose-operator-registry@sha256:58253e46addc4d488c523f8df98d171e3ecc86bbaf5d84f4cc55d568e3ec95f7_amd64 as a component of Red Hat OpenShift Container Platform 4.12	*, registry.redhat.io/openshift4/ose-operator-registry@sha256:58253e46addc4d488c523f8df98d171e3ecc86bbaf5d84f4cc55d568e3ec95f7_amd64, registry.redhat.io/openshift4/ose-operator-registry@sha256:58253e46addc4d488c523f8df98d171e3ecc86bbaf5d84f4cc55d568e3ec95f7_amd64
Red Hat	registry.redhat.io/openshift4/ose-cluster-autoscaler-operator@sha256:c2928f6d727369a79f3c1b2047e5f61788f12b1809dbda5adfd1527169fc30c5_amd64 as a component of Red Hat OpenShift Container Platform 4.12	*, registry.redhat.io/openshift4/ose-cluster-autoscaler-operator@sha256:c2928f6d727369a79f3c1b2047e5f61788f12b1809dbda5adfd1527169fc30c5_amd64, registry.redhat.io/openshift4/ose-cluster-autoscaler-operator@sha256:c2928f6d727369a79f3c1b2047e5f61788f12b1809dbda5adfd1527169fc30c5_amd64
Red Hat	registry.redhat.io/openshift4/ose-sdn-rhel8@sha256:ce62139adfbd8400cd38d6e3e1eb1eb8d37de3c765ce51b33fc45777b8e5b7ae_amd64 as a component of Red Hat OpenShift Container Platform 4.12	registry.redhat.io/openshift4/ose-sdn-rhel8@sha256:ce62139adfbd8400cd38d6e3e1eb1eb8d37de3c765ce51b33fc45777b8e5b7ae_amd64, *, registry.redhat.io/openshift4/ose-sdn-rhel8@sha256:ce62139adfbd8400cd38d6e3e1eb1eb8d37de3c765ce51b33fc45777b8e5b7ae_amd64
Red Hat	registry.redhat.io/openshift4/ose-csi-external-attacher-rhel8@sha256:68511930dbb8ca8a06aab80248a3151ef8338696395c7dba67f040918369bd72_amd64 as a component of Red Hat OpenShift Container Platform 4.12	*, registry.redhat.io/openshift4/ose-csi-external-attacher-rhel8@sha256:68511930dbb8ca8a06aab80248a3151ef8338696395c7dba67f040918369bd72_amd64, registry.redhat.io/openshift4/ose-csi-external-attacher-rhel8@sha256:68511930dbb8ca8a06aab80248a3151ef8338696395c7dba67f040918369bd72_amd64
Red Hat	registry.redhat.io/openshift4/ose-powervs-machine-controllers-rhel8@sha256:7ff04d0ecbb622f1fb61cd47c0713d225c581ebbfcc8cd0e1577308058ce6828_amd64 as a component of Red Hat OpenShift Container Platform 4.12	, registry.redhat.io/openshift4/ose-powervs-machine-controllers-rhel8@sha256:7ff04d0ecbb622f1fb61cd47c0713d225c581ebbfcc8cd0e1577308058ce6828_amd64,
Red Hat	registry.redhat.io/openshift4/ose-cluster-openshift-controller-manager-operator@sha256:2d4a9ce5b2ef89b370bc1e43ae991f74238b5825ee780050b08ab47c5e543fbd_amd64 as a component of Red Hat OpenShift Container Platform 4.12	registry.redhat.io/openshift4/ose-cluster-openshift-controller-manager-operator@sha256:2d4a9ce5b2ef89b370bc1e43ae991f74238b5825ee780050b08ab47c5e543fbd_amd64, *, registry.redhat.io/openshift4/ose-cluster-openshift-controller-manager-operator@sha256:2d4a9ce5b2ef89b370bc1e43ae991f74238b5825ee780050b08ab47c5e543fbd_amd64
Red Hat	registry.redhat.io/openshift4/ose-vsphere-csi-driver-rhel8@sha256:b86a444ebf488764fe7ae5399befceac88c45ea771d8a09a6148f8457b009b85_amd64 as a component of Red Hat OpenShift Container Platform 4.12	, , registry.redhat.io/openshift4/ose-vsphere-csi-driver-rhel8@sha256:b86a444ebf488764fe7ae5399befceac88c45ea771d8a09a6148f8457b009b85_amd64
Red Hat	registry.redhat.io/openshift4/ose-container-networking-plugins-rhel8@sha256:8cd01664c53cbe177366ef8c434bf37bc65961f13a2b318454b89c6bc76fa2ad_amd64 as a component of Red Hat OpenShift Container Platform 4.12	, , *
Red Hat	registry.redhat.io/openshift4/ose-prometheus-alertmanager@sha256:d5de164c0ec31545bcfdc9c09ddd7da5e9682da050e721200b6bdb3ec88a7e20_amd64 as a component of Red Hat OpenShift Container Platform 4.12	, registry.redhat.io/openshift4/ose-prometheus-alertmanager@sha256:d5de164c0ec31545bcfdc9c09ddd7da5e9682da050e721200b6bdb3ec88a7e20_amd64,
Red Hat	registry.redhat.io/openshift4/ose-ovirt-machine-controllers-rhel8@sha256:d71bc2dcb5d82edd48fa437a57f0ef8ef71415f6038dd6d4a81aebe28ee5d425_amd64 as a component of Red Hat OpenShift Container Platform 4.12	registry.redhat.io/openshift4/ose-ovirt-machine-controllers-rhel8@sha256:d71bc2dcb5d82edd48fa437a57f0ef8ef71415f6038dd6d4a81aebe28ee5d425_amd64, *, registry.redhat.io/openshift4/ose-ovirt-machine-controllers-rhel8@sha256:d71bc2dcb5d82edd48fa437a57f0ef8ef71415f6038dd6d4a81aebe28ee5d425_amd64
Red Hat	registry.redhat.io/openshift4/network-tools-rhel8@sha256:0c3bcae29fc35ec43200062cdc2132a532fd05ea6ab852b94c078bd021106554_amd64 as a component of Red Hat OpenShift Container Platform 4.12	registry.redhat.io/openshift4/network-tools-rhel8@sha256:0c3bcae29fc35ec43200062cdc2132a532fd05ea6ab852b94c078bd021106554_amd64, *, registry.redhat.io/openshift4/network-tools-rhel8@sha256:0c3bcae29fc35ec43200062cdc2132a532fd05ea6ab852b94c078bd021106554_amd64
Red Hat	registry.redhat.io/openshift4/ose-kube-proxy@sha256:d40beff891cfee2b1355bb66ed994fd4b14fd4e9701386fc0d664b415cacf166_amd64 as a component of Red Hat OpenShift Container Platform 4.12	, , *
Red Hat	registry.redhat.io/openshift4/ose-console-operator@sha256:4b8394bfb17147ac6f2f60b5ca1073654b6614f1a7bf96f12d235df68f850712_amd64 as a component of Red Hat OpenShift Container Platform 4.12	*, registry.redhat.io/openshift4/ose-console-operator@sha256:4b8394bfb17147ac6f2f60b5ca1073654b6614f1a7bf96f12d235df68f850712_amd64, registry.redhat.io/openshift4/ose-console-operator@sha256:4b8394bfb17147ac6f2f60b5ca1073654b6614f1a7bf96f12d235df68f850712_amd64