CLEANSTART-2026-SX80620 Security fixes for CVE-2026-42504 applied in versions: 2.18.0-r5

Security vulnerability affects the kube-state-metrics package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-KR89831 Security fixes for CVE-2026-42504 applied in versions: 8.19.14-r2

Security vulnerability affects the elastic-beats package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-PC73667 Security fixes for CVE-2026-27145, CVE-2026-42504, CVE-2026-42507 applied in versions: 0.89.0-r2

Multiple security vulnerabilities affect the prometheus-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ER76776 Security fixes for CVE-2026-27145, CVE-2026-42504, CVE-2026-42507 applied in versions: 2.12.0-r2

Multiple security vulnerabilities affect the kubewatch package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CP05946 Security fixes for CVE-2026-42504 applied in versions: 1.6.4-r5

Security vulnerability affects the kyverno-policy-reporter-kyverno-plugin-fips package. This issue is resolved in later releases. See references for vulnerability details...

OPENSUSE-SU-2026:20976-1 Security update for go1.26

This update for go1.26 fixes the following issues Update to go1.26.4 bsc1255111: - CVE-2026-27145: crypto/x509: split candidate hostname only once bsc1267450. - CVE-2026-42504: mime: quadratic complexity in WordDecoder.DecodeHeader bsc1267442. - CVE-2026-42507: net/textproto: arbitrary input are...

BELL-CVE-2026-42504

Bulletin has no description...

CVE-2026-42504 vulnerabilities

Vulnerabilities for packages: rancher, crossplane-provider-aws-memorydb, nri-discovery-kubernetes, hubble-ui, pinact, k3s, crossplane-provider-family-azure, descheduler, dgraph, cluster-proportional-autoscaler, kubescape, bento, net-kourier, ingress-nginx-controller, policy-controller,...

CVE-2026-42504 Quadratic complexity in WordDecoder.DecodeHeader in mime

Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU...