The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade yq-goUpgrade rclone | Aug 8, 2025 | Dec 18, 2024 |
| Amazon Linux Ami 2 | — | Upgrade nerdctlUpgrade amazon-cloudwatch-agentUpgrade nerdctl-debuginfoUpgrade runfinch-finchUpgrade soci-snapshotterUpgrade ecs-init | Jan 27, 2025 | Dec 18, 2024 |
| Amazon_linux_2023 | — | Upgrade nerdctlUpgrade ecs-initUpgrade runfinch-finchUpgrade amazon-cloudwatch-agentUpgrade soci-snapshotter | Feb 17, 2025 | Dec 18, 2024 |
| Debian | — | Upgrade golang-golang-x-net | May 15, 2025 | Dec 18, 2024 |
| Freebsd | — | Upgrade oauth2-proxy | Jan 31, 2025 | Jan 30, 2025 |
| Redhat Openshift | — | Upgrade ose-nutanix-machine-controllers-rhel8 | Aug 10, 2026 | Dec 18, 2024 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.4.2Upgrade Splunk Enterprise to version 9.1.10Upgrade Splunk Enterprise to version 9.2.6Upgrade Splunk Enterprise to version 9.3.5Upgrade Splunk Universal Forwarder to version 9.4.2Upgrade Splunk Enterprise to version 9.2.7Upgrade Splunk Enterprise to version 9.3.4Upgrade Splunk Enterprise to version 9.1.9Upgrade Splunk Enterprise to version 9.4.3 | Sep 30, 2025 | Dec 18, 2024 |
| Suse | — | Upgrade kubevirt-virt-operatorUpgrade velociraptor-clientUpgrade helm-fish-completionUpgrade apptainer-leapUpgrade kubevirt-testsUpgrade gitea-teaUpgrade helm-bash-completionUpgrade helm-zsh-completionUpgrade system-user-velociraptorUpgrade kubevirt-virt-controllerUpgrade kubevirt-virt-apiUpgrade kubevirt-manifestsUpgrade kubevirt-virt-handlerUpgrade kubevirt-virt-exportserverUpgrade apptainer-sle15_5Upgrade rclone-bash-completionUpgrade kubevirt-container-diskUpgrade rcloneUpgrade velociraptorUpgrade govulncheck-vulndbUpgrade rclone-zsh-completionUpgrade obs-service-kubevirt_containers_metaUpgrade trivyUpgrade kubevirt-pr-helper-confUpgrade kubevirt-virt-launcherUpgrade kubevirt-virt-exportproxyUpgrade kubevirt-virtctlUpgrade apptainerUpgrade gitea-tea-bash-completionUpgrade apptainer-sle15_6Upgrade helmUpgrade gitea-tea-zsh-completion | Dec 5, 2025 | Jan 10, 2025 |
| Ubuntu | — | Upgrade juju (Ubuntu Pro)Upgrade golang-golang-x-net-devUpgrade adsys-windowsUpgrade golang-golang-x-net-dev (Ubuntu Pro)Upgrade adsysUpgrade golang-go.net-dev (Ubuntu Pro)Upgrade juju-2.0 (Ubuntu Pro) | Jan 10, 2025 | Dec 18, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub