VDB
RHSA-2026:56366
RHSA-2026:56366
PUBLISHED
CVSS 8.199999809265137 HIGH
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.
Risk Scores
CVSS 3.1
8.199999809265137
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:156fb0172a1d4bdc86650042104d441bb8379033ac53dbb8fc52d4de499238cd_amd64 as a component of Red Hat Openshift Data Foundation 4.19 | *, *, * |
| Red Hat | registry.redhat.io/odf4/odf-dependencies-operator-bundle@sha256:c1dabcc98eed771bf0779b88ac84b89446483a93e43435fd9ca2e54ab27b5ddb_amd64 as a component of Red Hat Openshift Data Foundation 4.19 | *, *, * |
| Red Hat | registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:e0ffdc3456fa829c7022c0a19b288c9a2a695be8cc67e7db5213d79409ace9de_amd64 as a component of Red Hat Openshift Data Foundation 4.19 | *, *, * |
| Red Hat | registry.redhat.io/odf4/odr-rhel9-operator@sha256:6e57a9e04a9855e7446e324e3e0747bd2356eda265d9d4ed7dd8323ae644e4f0_s390x as a component of Red Hat Openshift Data Foundation 4.19 | *, *, * |
| Red Hat | registry.redhat.io/odf4/odf-cli-rhel9@sha256:f0862c9467f537f49a75b43dcea9cbaa14efcf4452dc38684eb4287bfc522f02_ppc64le as a component of Red Hat Openshift Data Foundation 4.19 | *, *, * |
| Red Hat | registry.redhat.io/odf4/ocs-rhel9-operator@sha256:1a8a028876647d3180f8b2c8aa5a01588434acab76212e0acbad041ea055e88d_arm64 as a component of Red Hat Openshift Data Foundation 4.19 | *, *, * |
| Red Hat | registry.redhat.io/odf4/ocs-rhel9-operator@sha256:2f193e5fc0fee99efe026692c89b462e1017ab955440125125e509a15f5e90a6_s390x as a component of Red Hat Openshift Data Foundation 4.19 | *, *, * |
| Red Hat | registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:6e94f0a134de5aa4697db3166410d85eca7be08810b32ff09c593c677a4fa302_ppc64le as a component of Red Hat Openshift Data Foundation 4.19 | *, *, * |
| Red Hat | registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:0fb3ca3bb4ad58d588b97765c43d4f0608f5c05de5875d144afd61c38e317fc7_amd64 as a component of Red Hat Openshift Data Foundation 4.19 | *, *, * |
| Red Hat | registry.redhat.io/odf4/cephcsi-rhel9-operator@sha256:f1272e4b51d0e7a7660f89c0dcc237c9f637f8f9974840c02ce870042efac469_amd64 as a component of Red Hat Openshift Data Foundation 4.19 | *, *, * |
| Red Hat | registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:46f09d320c390a3e9eeac7ea4e41a6b15978dcd6b233a9f1af8ab67172fb2677_ppc64le as a component of Red Hat Openshift Data Foundation 4.19 | *, *, * |
| Red Hat | registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:bd80cb94dde1def25c86a39d5a67681d0d6a2b56cfe0527927af0d4e70e0eefb_amd64 as a component of Red Hat Openshift Data Foundation 4.19 | *, *, * |
| Red Hat | registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:d54215f1b92e64a148b46c4604c148542731a62439a56c2682f0415c2d832d38_ppc64le as a component of Red Hat Openshift Data Foundation 4.19 | *, *, * |
| Red Hat | registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:14bff217c56ee44eb67620f6faafd9121c6b328962c68d6118d6b0a119664d1a_ppc64le as a component of Red Hat Openshift Data Foundation 4.19 | *, *, * |
| Red Hat | registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:a2db2cd564005e00282e7602683075926b6afff19c03c3d51ccf8070a2b96707_s390x as a component of Red Hat Openshift Data Foundation 4.19 | *, *, * |
| Red Hat | registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:a680f2c9845c7c81bad2b15057ed8871846bd410ebc1bc6d2520a78eb0cd305d_amd64 as a component of Red Hat Openshift Data Foundation 4.19 | *, *, * |
| Red Hat | registry.redhat.io/odf4/ocs-client-operator-bundle@sha256:d54bb64c94cfefeca479b6736463c93a683949947dd01435fb95277b85f1cb19_amd64 as a component of Red Hat Openshift Data Foundation 4.19 | *, *, * |
| Red Hat | registry.redhat.io/odf4/mcg-rhel9-operator@sha256:6badfa824123032935d38952b2b1950a5528172782b26756ef63c973c7ae4df7_ppc64le as a component of Red Hat Openshift Data Foundation 4.19 | *, *, * |
| Red Hat | registry.redhat.io/odf4/mcg-core-rhel9@sha256:a476239c42d3cac3f1ba5fc2fd964ff813b96d3a2ebbf3101db2c9cfe078bf85_s390x as a component of Red Hat Openshift Data Foundation 4.19 | *, *, * |
| Red Hat | registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:00c6fba5b97a17ffa705b48f179b071e38cf2c0ddc6ce1464736042785b2a787_amd64 as a component of Red Hat Openshift Data Foundation 4.19 | *, *, * |
…and 71 more
Timeline
- Aug 18, 2026 CVE Published
- Sep 24, 2026 CVE Updated
- Sep 24, 2026 Distribution Patch
- Sep 24, 2026 Distribution Patch
- Sep 24, 2026 Security Advisory
- Sep 24, 2026 Security Advisory
- Sep 24, 2026 Security Advisory
- Sep 24, 2026 Security Advisory
- Sep 24, 2026 Security Advisory
- Sep 24, 2026 Security Advisory
- Sep 24, 2026 Security Advisory
- Sep 24, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:56366 advisory
- https://access.redhat.com/security/cve/CVE-2025-61726 advisory
- https://access.redhat.com/security/cve/CVE-2025-61729 advisory
- https://access.redhat.com/security/cve/CVE-2026-12143 advisory
- https://access.redhat.com/security/cve/CVE-2026-12151 advisory
- https://access.redhat.com/security/cve/CVE-2026-13149 advisory
- https://access.redhat.com/security/cve/CVE-2026-13676 advisory
- https://access.redhat.com/security/cve/CVE-2026-25681 advisory
- https://access.redhat.com/security/cve/CVE-2026-27136 advisory
- https://access.redhat.com/security/cve/CVE-2026-33186 advisory
- https://access.redhat.com/security/cve/CVE-2026-34986 advisory
- https://access.redhat.com/security/cve/CVE-2026-42342 advisory
- https://access.redhat.com/security/cve/CVE-2026-44740 advisory
- https://access.redhat.com/security/cve/CVE-2026-45736 advisory
- https://access.redhat.com/security/cve/CVE-2026-48779 advisory
- https://access.redhat.com/security/cve/CVE-2026-53488 advisory
- https://access.redhat.com/security/cve/CVE-2026-53489 advisory
- https://access.redhat.com/security/cve/CVE-2026-53492 advisory
- https://access.redhat.com/security/cve/CVE-2026-59869 advisory
- https://access.redhat.com/security/cve/CVE-2026-6321 advisory
…and 125 more