MG
Product
Multicluster Global Hub 1.7.0
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 8Medium 2Low 0
Watch
Add Multicluster Global Hub 1.7.0 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-46385 | 7.5 | May 29 | iskorotkov/avro: CPU Exhaustion in Avro Decoder Affected: All versions, or not specified |
| CVE-2026-46384 | 7.5 | May 29 | iskorotkov/avro: Integer Overflow in Avro Decoder Affected: All versions, or not specified |
| CVE-2026-33811 | 7.5 | May 7 | Crash when handling long CNAME response in net Affected: All versions, or not specified |
| CVE-2026-42154 | 7.5 | May 4 | Prometheus: remote read endpoint allows denial of service via crafted snappy payload Affected: All versions, or not specified |
| CVE-2026-42151 | 7.5 | May 4 | Prometheus Azure AD remote write OAuth client secret exposed via config API Affected: All versions, or not specified |
| CVE-2026-41602 | 7.5 | Apr 28 | Apache Thrift: Go TFramedTransport uint32 overflow Affected: All versions, or not specified |
| CVE-2026-21728 | 7.5 | Apr 24 | Tempo query limit results in unbounded memory allocation Affected: All versions, or not specified |
| CVE-2026-43869 | 7.3 | May 5 | Apache Thrift: TSSLTransportFactory.java hostname verification Affected: All versions, or not specified |
Showing 8