Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade golang-srcUpgrade containernetworking-pluginsUpgrade golang-testsUpgrade golangUpgrade fuse-overlayfsUpgrade grafana-selinuxUpgrade podman-remoteUpgrade udicaUpgrade osbuild-composerUpgrade golang-docsUpgrade criu-develUpgrade toolboxUpgrade skopeoUpgrade oci-seccomp-bpf-hookUpgrade runcUpgrade osbuild-composer-workerUpgrade podman-catatonitUpgrade netavarkUpgrade libslirp-develUpgrade delveUpgrade containers-commonUpgrade critUpgrade python3-criuUpgrade podman-pluginsUpgrade skopeo-testsUpgrade golang-binUpgrade criu-libsUpgrade criuUpgrade aardvark-dnsUpgrade podmanUpgrade go-toolsetUpgrade conmonUpgrade buildah-testsUpgrade cockpit-podmanUpgrade podman-dockerUpgrade grafanaUpgrade libslirpUpgrade python3-podmanUpgrade podman-testsUpgrade slirp4netnsUpgrade golang-miscUpgrade osbuild-composer-coreUpgrade podman-gvproxyUpgrade toolbox-testsUpgrade buildahUpgrade golang-raceUpgrade crunUpgrade container-selinuxUpgrade opentelemetry-collector | Oct 11, 2026 | Aug 26, 2026 |
| Alpine Linux | — | Upgrade go | Sep 7, 2026 | Aug 13, 2026 |
| Amazon Linux Ami 2 | — | Upgrade golang-binUpgrade golang-docsUpgrade golang-testsUpgrade golangUpgrade golang-miscUpgrade golang-srcUpgrade golang-shared | Oct 19, 2026 | Oct 19, 2026 |
| Amazon_linux_2023 | — | Upgrade golang-testsUpgrade golang-sharedUpgrade golang-docsUpgrade golang-binUpgrade golang-miscUpgrade golang-srcUpgrade golang | Sep 1, 2026 | Aug 13, 2026 |
| Redhat Openshift | — | Upgrade ose-azure-acr-image-credential-providerUpgrade cri-toolsUpgrade ose-aws-ecr-image-credential-providerUpgrade ose-gcp-gcr-image-credential-providerUpgrade cri-oUpgrade openshiftUpgrade ose-crio-credential-providerUpgrade openshift-clientsUpgrade microshift | Sep 16, 2026 | Aug 13, 2026 |
| Redhat_linux | — | Upgrade image-builder-debuginfoUpgrade python3.12-django-ansible-base+oauth2_providerUpgrade git-lfs-debugsourceUpgrade python3.12-django-ansible-base+rest_filtersUpgrade automation-gateway-proxy-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade flightctl-agentUpgrade podman-catatonit-debuginfoUpgrade slirp4netns-debugsourceUpgrade golang-raceUpgrade automation-controllerUpgrade container-selinuxUpgrade automation-gateway-configUpgrade udicaUpgrade toolboxUpgrade yggdrasil-worker-package-manager-debuginfoUpgrade python3.12-django-ansible-base+authenticationUpgrade automation-eda-controllerUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade podman-debugsourceUpgrade criu-libs-debuginfoUpgrade automation-gateway-proxyUpgrade delve-debugsourceUpgrade python3.12-galaxy-ngUpgrade slirp4netns-debuginfoUpgrade skopeo-testsUpgrade containernetworking-plugins-debugsourceUpgrade podman-catatonitUpgrade flightctl-observabilityUpgrade toolbox-testsUpgrade python3-sqlparseUpgrade osbuild-composer-worker-debuginfoUpgrade python3-podmanUpgrade automation-gateway-proxy-serverUpgrade delveUpgrade conmonUpgrade libslirp-debugsourceUpgrade yggdrasilUpgrade osbuild-composer-workerUpgrade yggdrasil-examples-debuginfoUpgrade python3.12-django-ansible-base+channel_authUpgrade python3.12-django-ansible-base+jwt_consumerUpgrade podman-dockerUpgrade criu-develUpgrade grafana-debugsourceUpgrade ignition-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-tests-debuginfoUpgrade receptor-debugsourceUpgrade podman-testsUpgrade rhc-worker-playbook-debugsourceUpgrade automation-platform-uiUpgrade ignition-validateUpgrade toolbox-debugsourceUpgrade cockpit-podmanUpgrade golang-docsUpgrade ipp-usb-debuginfoUpgrade critUpgrade toolbox-debuginfoUpgrade podman-pluginsUpgrade automation-eda-controller-baseUpgrade osbuild-composer-debuginfoUpgrade buildah-debugsourceUpgrade osbuild-composer-debugsourceUpgrade receptor-debuginfoUpgrade ignition-debuginfoUpgrade ipp-usbUpgrade osbuild-composer-dnf-jsonUpgrade netavarkUpgrade podman-gvproxyUpgrade skopeoUpgrade flightctl-servicesUpgrade criuUpgrade python3.12-django-ansible-base+rbacUpgrade crunUpgrade crun-debuginfoUpgrade libslirpUpgrade automation-eda-controller-base-servicesUpgrade python3.12-gitpythonNo solution existsUpgrade python3.12-sqlparseUpgrade slirp4netnsUpgrade ignition-validate-debuginfoUpgrade ignition-edgeUpgrade osbuild-composer-coreUpgrade image-builder-debugsourceUpgrade grafana-selinuxUpgrade flightctl-selinuxUpgrade conmon-debugsourceUpgrade conmon-debuginfoUpgrade buildahUpgrade yggdrasil-worker-package-managerUpgrade yggdrasil-develUpgrade osbuild-composer-tests-debuginfoUpgrade automation-gateway-serverUpgrade rhc-worker-playbookUpgrade automation-gateway-proxy-server-debuginfoUpgrade ignition-grubUpgrade delve-debuginfoUpgrade criu-libsUpgrade libslirp-debuginfoUpgrade automation-gatewayUpgrade python3.12-django-ansible-base+redis_clientUpgrade python3.12-django-ansible-base+resource_registryUpgrade podman-debuginfoUpgrade python3.12-django-ansible-base+feature_flagsUpgrade opentelemetry-collectorUpgrade yggdrasil-debugsourceUpgrade podman-remoteUpgrade automation-controller-venv-towerUpgrade golang-binUpgrade grafana-debuginfoUpgrade automation-eda-controller-worker-servicesUpgrade ignitionUpgrade automation-controller-cliUpgrade fuse-overlayfs-debugsourceUpgrade python3.12-django-ansible-baseUpgrade yggdrasil-worker-package-manager-debugsourceUpgrade python3.12-django-ansible-base+api_documentationUpgrade podmanUpgrade oci-seccomp-bpf-hookUpgrade golang-srcUpgrade python3.12-django-ansible-base+activitystreamUpgrade buildah-testsUpgrade receptorUpgrade fuse-overlayfsUpgrade podman-gvproxy-debuginfoUpgrade criu-debuginfoUpgrade receptorctlUpgrade grafanaUpgrade python3-criuUpgrade runc-debugsourceUpgrade rhc-worker-playbook-debuginfoUpgrade automation-eda-controller-event-stream-servicesUpgrade automation-controller-uiUpgrade golang-testsUpgrade containernetworking-pluginsUpgrade osbuild-composerUpgrade crun-debugsourceUpgrade image-builderUpgrade git-lfsUpgrade runcUpgrade git-lfs-debuginfoUpgrade criu-debugsourceUpgrade containers-commonUpgrade buildah-tests-debuginfoUpgrade automation-hubUpgrade automation-controller-serverUpgrade aardvark-dnsUpgrade aap-metrics-utilityUpgrade podman-remote-debuginfoUpgrade podman-plugins-debuginfoUpgrade osbuild-composer-core-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-develUpgrade golang-miscUpgrade flightctl-cliUpgrade golangUpgrade yggdrasil-debuginfoUpgrade go-toolsetUpgrade buildah-debuginfoUpgrade runc-debuginfo | Aug 17, 2026 | Aug 13, 2026 |
| Rocky_linux | — | Upgrade skopeo-testsUpgrade conmon-debugsourceUpgrade podman-remote-debuginfoUpgrade ipp-usbUpgrade aardvark-dnsUpgrade conmon-debuginfoUpgrade libslirpUpgrade netavarkUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade image-builder-debugsourceUpgrade podman-testsUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade osbuild-composer-debuginfoUpgrade grafanaUpgrade criu-debuginfoUpgrade golangUpgrade golang-raceUpgrade toolboxUpgrade buildah-debuginfoUpgrade conmonUpgrade fuse-overlayfs-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade podman-gvproxyUpgrade libslirp-develUpgrade osbuild-composer-core-debuginfoUpgrade buildah-tests-debuginfoUpgrade criu-libsUpgrade delve-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade go-toolsetUpgrade osbuild-composer-coreUpgrade crun-debugsourceUpgrade crun-debuginfoUpgrade containers-commonUpgrade criu-develUpgrade slirp4netnsUpgrade criu-debugsourceUpgrade runc-debugsourceUpgrade podmanUpgrade criuUpgrade grafana-selinuxUpgrade podman-catatonit-debuginfoUpgrade buildahUpgrade skopeoUpgrade fuse-overlayfs-debuginfoUpgrade delveUpgrade critUpgrade toolbox-testsUpgrade podman-pluginsUpgrade libslirp-debugsourceUpgrade image-builder-debuginfoUpgrade grafana-debugsourceUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade podman-catatonitUpgrade buildah-testsUpgrade toolbox-debuginfoUpgrade podman-debugsourceUpgrade libslirp-debuginfoUpgrade osbuild-composerUpgrade grafana-debuginfoUpgrade buildah-debugsourceUpgrade toolbox-debugsourceUpgrade slirp4netns-debugsourceUpgrade slirp4netns-debuginfoUpgrade osbuild-composer-debugsourceUpgrade fuse-overlayfsUpgrade golang-binUpgrade delve-debugsourceUpgrade runcUpgrade podman-gvproxy-debuginfoUpgrade osbuild-composer-workerUpgrade crunUpgrade containernetworking-plugins-debuginfoUpgrade osbuild-composer-worker-debuginfoUpgrade image-builderUpgrade podman-debuginfoUpgrade podman-tests-debuginfoUpgrade python3-criuUpgrade podman-plugins-debuginfoUpgrade opentelemetry-collectorUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade ipp-usb-debuginfoUpgrade criu-libs-debuginfo | Aug 28, 2026 | Aug 26, 2026 |
| Ubuntu | — | Upgrade golang-1.22 | Oct 19, 2026 | Aug 13, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 15, 2026 | Aug 13, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub