VDB

RHSA-2026:51288

RHSA-2026:51288 PUBLISHED CVSS 8.800000190734863 HIGH

Record from redhat · Published August 6, 2026

A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.

Risk scores

CVSS 3.1
8.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L

Affected products

VendorProductVersions
Red Hatslirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)0:1.2.0-3.module+el8.6.0+24209+25a14987
Red Hatcontainer-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.noarch (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)2:2.189.0-1.module+el8.6.0+24209+25a14987
Red Hatslirp4netns-0:1.2.0-3.module+el8.6.0+24209+25a14987.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)0:1.2.0-3.module+el8.6.0+24209+25a14987
Red Hatlibslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)0:4.4.0-1.module+el8.6.0+24209+25a14987
Red Hatpodman-2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)2:4.2.0-8.module+el8.6.0+24590+db5ff31b.6
Red Hatoci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1
Red Hatfuse-overlayfs-0:1.9-1.module+el8.6.0+24209+25a14987.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)0:1.9-1.module+el8.6.0+24209+25a14987
Red Hatcockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)0:49.1-1.module+el8.6.0+24209+25a14987
Red Hatcontainernetworking-plugins-debuginfo-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2
Red Hatcontainer-selinux-2:2.189.0-1.module+el8.6.0+24209+25a14987.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)2:2.189.0-1.module+el8.6.0+24209+25a14987
Red Hatudica-0:0.2.6-5.module+el8.6.0+24209+25a14987.noarch (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)0:0.2.6-5.module+el8.6.0+24209+25a14987
Red Hatbuildah-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3
Red Hatrunc-1:1.2.9-1.module+el8.6.0+24505+50d764bf.2.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)1:1.2.9-1.module+el8.6.0+24505+50d764bf.2
Red Hatcontainernetworking-plugins-debugsource-1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)1:1.1.1-5.module+el8.6.0+24590+db5ff31b.2
Red Hatconmon-2:2.1.4-1.module+el8.6.0+24209+25a14987.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)2:2.1.4-1.module+el8.6.0+24209+25a14987
Red Hatbuildah-tests-1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)1:1.26.11-1.module+el8.6.0+24590+db5ff31b.3
Red Hatcontainers-common-2:1-40.module+el8.6.0+24209+25a14987.src (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)2:1-40.module+el8.6.0+24209+25a14987
Red Hatoci-seccomp-bpf-hook-debugsource-0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)0:1.2.6-1.module+el8.6.0+24215+d8cb7679.1
Red Hatlibslirp-devel-0:4.4.0-1.module+el8.6.0+24209+25a14987.x86_64 (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)0:4.4.0-1.module+el8.6.0+24209+25a14987
Red Hatcockpit-podman-0:49.1-1.module+el8.6.0+24209+25a14987.noarch (container-tools:rhel8) as a component of Red Hat Enterprise Linux AppStream AUS (v.8.6)0:49.1-1.module+el8.6.0+24209+25a14987

…and 148 more

Timeline

  • Aug 6, 2026 CVE Published
  • Oct 14, 2026 CVE Updated
  • Oct 14, 2026 Distribution Patch (2 in total, the first dated here)
  • Oct 14, 2026 Security Advisory (11 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln RHSA-2026:51288
vulnetix vdb fixes RHSA-2026:51288

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/RHSA-2026%3A51288/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

…and 59 more

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›