https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 11:54:03 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-371833 EUVD-2026-371833 https://cve.radiocsirt.org/vuln/euvd-2026-371833 https://cve.radiocsirt.org/vuln/fkie_cve-2026-49329 <p>A flaw was found in openshift/oauth-server. The OAuth login and error page endpoints pass the unauthenticated Accept-Language header to golang.org/x/text/language.ParseAcceptLanguage() without input validation. A bypass of the CVE-2022-32149 mitigation exists: the upstream guard counts only &#39;-&#39; characters but the internal BCP 47 scanner aliases &#39;_&#39; to &#39;-&#39; after the guard check. An unauthenticated attacker can send a crafted Accept-Language header using &#39;_&#39; separators to trigger quadratic-time parsing, consuming excessive CPU and denying authentication to all cluster users.</p> <p>A flaw was found in openshift/oauth-server. The OAuth login and error page endpoints pass the unauthenticated Accept-Language header to golang.org/x/text/language.ParseAcceptLanguage() without input validation. A bypass of the CVE-2022-32149 mitigation exists: the upstream guard counts only &#39;-&#39; characters but the internal BCP 47 scanner aliases &#39;_&#39; to &#39;-&#39; after the guard check. An unauthenticated attacker can send a crafted Accept-Language header using &#39;_&#39; separators to trigger quadratic-time parsing, consuming excessive CPU and denying authentication to all cluster users.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-49329 https://cve.radiocsirt.org/vuln/ghsa-2mr2-j2wm-v93x <p>A flaw was found in openshift/oauth-server. The OAuth login and error page endpoints pass the unauthenticated Accept-Language header to golang.org/x/text/language.ParseAcceptLanguage() without input validation. A bypass of the CVE-2022-32149 mitigation exists: the upstream guard counts only &#39;-&#39; characters but the internal BCP 47 scanner aliases &#39;_&#39; to &#39;-&#39; after the guard check. An unauthenticated attacker can send a crafted Accept-Language header using &#39;_&#39; separators to trigger quadratic-time parsing, consuming excessive CPU and denying authentication to all cluster users.</p> <p>A flaw was found in openshift/oauth-server. The OAuth login and error page endpoints pass the unauthenticated Accept-Language header to golang.org/x/text/language.ParseAcceptLanguage() without input validation. A bypass of the CVE-2022-32149 mitigation exists: the upstream guard counts only &#39;-&#39; characters but the internal BCP 47 scanner aliases &#39;_&#39; to &#39;-&#39; after the guard check. An unauthenticated attacker can send a crafted Accept-Language header using &#39;_&#39; separators to trigger quadratic-time parsing, consuming excessive CPU and denying authentication to all cluster users.</p> https://cve.radiocsirt.org/vuln/ghsa-2mr2-j2wm-v93x https://cve.radiocsirt.org/vuln/rhsa-2026:74380 <p>net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters openshift/oauth-server: openshift/oauth-server: Quadratic-time DoS via Accept-Language header underscore bypass on unauthenticated login endpoints nanoid: nanoid: Denial of Service via infinite loop in random ID generation oauth-proxy: Open Redirect via /\ and /\t Bypass in Post-Login Redirect oc-mirror__release-4.21: Embedded local cache registry listens on all interfaces without authentication, with delete enabled</p> <p>net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters openshift/oauth-server: openshift/oauth-server: Quadratic-time DoS via Accept-Language header underscore bypass on unauthenticated login endpoints nanoid: nanoid: Denial of Service via infinite loop in random ID generation oauth-proxy: Open Redirect via /\ and /\t Bypass in Post-Login Redirect oc-mirror__release-4.21: Embedded local cache registry listens on all interfaces without authentication, with delete enabled</p> https://cve.radiocsirt.org/vuln/rhsa-2026:74380