The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Billy is an interface filesystem abstraction for Go. Prior to versions 5.9.0 and 6.0.0-alpha.1, multiple components may improperly handle crafted or malformed input, resulting in panics, infinite loops, uncontrolled recursion, or excessive resource consumption. These issues arise from insufficient validation and missing safety mechanisms such as cycle detection, recursion limits, or defensive handling of unexpected states when processing untrusted repository data and filesystem structures. This issue has been patched in versions 5.9.0 and 6.0.0-alpha.1.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade grafanaUpgrade grafana-selinux | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade grafanaUpgrade grafana-selinux | Oct 22, 2026 | Jun 1, 2026 |
| Redhat_linux | — | Upgrade grafanaUpgrade flightctl-cliUpgrade grafana-debugsourceUpgrade grafana-debuginfoUpgrade flightctl-observabilityUpgrade grafana-selinuxUpgrade flightctl-agentUpgrade flightctl-servicesUpgrade flightctl-selinux | Jul 17, 2026 | Jun 1, 2026 |
| Rocky_linux | — | Upgrade grafana-selinuxUpgrade grafanaUpgrade grafana-debugsourceUpgrade grafana-debuginfo | Jul 29, 2026 | Jul 28, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub