Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade goUpgrade rclone | May 20, 2026 | May 7, 2026 |
| Amazon Linux Ami 2 | — | Upgrade runfinch-finchUpgrade golang-binUpgrade amazon-ecr-credential-helper-debuginfoUpgrade golist-debuginfoUpgrade rcloneUpgrade dockerUpgrade ecs-initUpgrade cni-plugins-debuginfoUpgrade docker-debuginfoUpgrade cni-pluginsUpgrade golang-srcUpgrade nerdctlUpgrade golistUpgrade golangUpgrade oci-add-hooksUpgrade golang-miscUpgrade runc-debuginfoUpgrade nerdctl-debuginfoUpgrade rclone-debuginfoUpgrade containerd-debuginfoUpgrade cri-toolsUpgrade golang-sharedUpgrade containerd-stressUpgrade golang-docsUpgrade amazon-cloudwatch-agentUpgrade oci-add-hooks-debuginfoUpgrade runcUpgrade golang-testsUpgrade containerdUpgrade soci-snapshotterUpgrade cri-tools-debuginfoUpgrade amazon-ecr-credential-helper | Jun 8, 2026 | Jun 8, 2026 |
| Amazon_linux_2023 | — | Upgrade oci-add-hooks-debugsourceUpgrade golang-testsUpgrade yq-debugsourceUpgrade golangUpgrade ecs-initUpgrade golang-sharedUpgrade golang-binUpgrade nerdctlUpgrade containerd-debugsourceUpgrade runc-debugsourceUpgrade golist-debuginfoUpgrade rcloneUpgrade golang-srcUpgrade oci-add-hooksUpgrade dockerUpgrade golistUpgrade runc-debuginfoUpgrade runcUpgrade golang-miscUpgrade oci-add-hooks-debuginfoUpgrade yqUpgrade amazon-ecr-credential-helperUpgrade containerd-stress-debuginfoUpgrade golist-debugsourceUpgrade containerd-debuginfoUpgrade yq-debuginfoUpgrade containerd-stressUpgrade containerdUpgrade docker-debuginfoUpgrade golang-docsUpgrade rclone-debuginfoUpgrade runfinch-finchUpgrade credentials-fetcherUpgrade rclone-debugsourceUpgrade soci-snapshotterUpgrade docker-debugsource | May 28, 2026 | May 7, 2026 |
| Oracle_linux | — | Upgrade golang-miscUpgrade golang-raceUpgrade golangUpgrade golang-testsUpgrade golang-srcUpgrade go-toolsetUpgrade golang-binUpgrade delveUpgrade golang-docs | Jun 5, 2026 | May 7, 2026 |
| Redhat Openshift | — | Upgrade openshiftUpgrade microshiftUpgrade ose-azure-acr-image-credential-providerUpgrade openshift-clientsUpgrade ose-gcp-gcr-image-credential-providerUpgrade cri-oUpgrade ose-aws-ecr-image-credential-providerUpgrade kata-containers | Aug 20, 2026 | May 7, 2026 |
| Redhat_linux | — | Upgrade osbuild-composer-debuginfoUpgrade image-builder-debugsourceUpgrade ignition-grubUpgrade grafanaUpgrade ignition-debugsourceUpgrade ignition-validateUpgrade osbuild-composer-workerUpgrade grafana-debugsourceUpgrade opentelemetry-collectorUpgrade osbuild-composer-core-debuginfoUpgrade golang-miscUpgrade ignition-edgeUpgrade golangUpgrade flightctl-servicesUpgrade flightctl-cliUpgrade osbuild-composer-debugsourceUpgrade go-toolsetUpgrade delveUpgrade osbuild-composer-worker-debuginfoUpgrade golang-binUpgrade osbuild-composerUpgrade delve-debuginfoNo solution existsUpgrade flightctl-agentUpgrade golang-raceUpgrade image-builder-debuginfoUpgrade flightctl-observabilityUpgrade osbuild-composer-coreUpgrade grafana-selinuxUpgrade golang-docsUpgrade ignitionUpgrade osbuild-composer-dnf-jsonUpgrade ignition-debuginfoUpgrade osbuild-composer-tests-debuginfoUpgrade ignition-validate-debuginfoUpgrade image-builderUpgrade golang-testsUpgrade golang-srcUpgrade delve-debugsourceUpgrade grafana-debuginfoUpgrade flightctl-selinux | Jul 17, 2026 | May 7, 2026 |
| Rocky_linux | — | Upgrade go-toolsetUpgrade opentelemetry-collectorUpgrade delveUpgrade image-builder-debugsourceUpgrade image-builderUpgrade osbuild-composer-debuginfoUpgrade grafana-debugsourceUpgrade image-builder-debuginfoUpgrade osbuild-composer-workerUpgrade grafanaUpgrade delve-debuginfoUpgrade osbuild-composer-coreUpgrade osbuild-composer-core-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade golang-binUpgrade delve-debugsourceUpgrade golangUpgrade golang-raceUpgrade grafana-debuginfoUpgrade osbuild-composer-debugsourceUpgrade grafana-selinuxUpgrade osbuild-composer | Aug 27, 2026 | Aug 26, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | May 7, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub