NO
Product
Network Observability Operator
8
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 2High 5Medium 1Low 0
Watch
Add Network Observability Operator to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-13676 | 7.5 | Jun 29 | fast-uri vulnerable to host confusion via failed IDN canonicalization Affected: All versions, or not specified |
| CVE-2026-12143 | 7.5 | Jun 12 | form-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection) Affected: All versions, or not specified |
| CVE-2026-33814 | 7.5 | May 7 | Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net Affected: All versions, or not specified |
| CVE-2026-6322 | 7.5 | May 5 | fast-uri vulnerable to host confusion via percent-encoded authority delimiters Affected: All versions, or not specified |
| CVE-2026-42039 | 7.5 | Apr 24 | Axios: unbounded recursion in toFormData causes DoS via deeply nested request data Affected: All versions, or not specified |
Showing 5
