openshift_compliance_operator vulnerabilities

CVEs whose affected-version data names the openshift_compliance_operator package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-46600High· 7.5

2mo ago

golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing (CVE-2026-46600)

A flaw was found in golang.org/x/net/dns/dnsmessage. A remote attacker could send a specially crafted Service Binding (SVCB) or HTTPS resource record (RR) to a system using this component. When parsing this invalid record, the system may p…

▾ TwilightRed Hat · Multicluster Engine for KubernetesEPSS 0.55%via CSAF