Red Hat Service Interconnect

Red Hat Service Interconnect, based on the open source Skupper project, allows developer teams to easily and safely connect new services, legacy data sources, and edge applications without extensive network planning or waiting on network admins to provision the infrastructure.

Download

Browse the latest documentation

OverviewRed Hat Service Interconnect

Release notesRed Hat Service Interconnect

View all product documentation

Latest security advisories

Severity	Advisory/CVE	Synopsis	Date
Severity Important	Advisory/CVECVE-2026-78161	Synopsis A flaw was found in warmcat libwebsockets. A remote attacker could exploit an out-of-bounds write vulnerability in the LECP CBOR Recording component, specifically within the `report_raw_cbor` function. This could lead to information disclosure, data corruption, or denial of service.	Date
Severity Important	Advisory/CVECVE-2026-56858	Synopsis A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash ('/'), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user's browser, potentially compromising user data or actions.	Date
Severity Important	Advisory/CVECVE-2026-56862	Synopsis A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.	Date
Severity Important	Advisory/CVECVE-2026-56859	Synopsis A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.	Date
Severity Important	Advisory/CVECVE-2026-71235	Synopsis A flaw was found in Magistrala's Rules Engine. An authenticated low-privileged user can exploit this vulnerability by creating rules with embedded Go or Lua scripts. These scripts are executed server-side without sufficient validation, allowing for arbitrary file read and write operations, access to internal databases, and Server-Side Request Forgery (SSRF) against internal microservices. This could lead to significant data compromise and unauthorized system access.	Date