Vulnerabilities
Misconfiguration
Compliance
CVE Vulnerabilities

CVE-2026-42499

Published: May 07, 2026 | Modified: Sep 18, 2026
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
7.5 IMPORTANT
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Ubuntu
MEDIUM
Vulnerability-free packages from our partners
root.io logo minimus.io logo echo.ai logo
Additional information
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-42499
CWEhttps://cwe.mitre.org/data/definitions/.html

Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.

Affected Software

NameVendorStart VersionEnd Version
GoGolang*1.25.10 (excluding)
GoGolang1.26.0 (including)1.26.3 (excluding)
Red Hat Ansible Automation Platform 2.5 for RHEL 8RedHatautomation-gateway-proxy-0:2.5.10-7.el8ap*
Red Hat Ansible Automation Platform 2.5 for RHEL 9RedHatautomation-gateway-proxy-0:2.6.17-2.el9ap*
Red Hat Ansible Automation Platform 2.6 for RHEL 9RedHatautomation-gateway-proxy-0:2.6.17-2.el9ap*
Red Hat Enterprise Linux 10RedHatgolang-0:1.26.3-4.el10_2*
Red Hat Enterprise Linux 10RedHatgrafana-0:10.2.6-28.el10_2.5*
Red Hat Enterprise Linux 10RedHatbuildah-2:1.43.1-5.el10_2*
Red Hat Enterprise Linux 10RedHatskopeo-2:1.22.2-5.el10_2*
Red Hat Enterprise Linux 10RedHatopentelemetry-collector-0:0.152.1-2.el10_2*
Red Hat Enterprise Linux 10RedHatimage-builder-0:52.1-1.el10_2.2*
Red Hat Enterprise Linux 10RedHatosbuild-composer-0:165.1-3.el10_2.2*
Red Hat Enterprise Linux 10RedHatpodman-7:5.8.2-9.el10_2*
Red Hat Enterprise Linux 10.0 Extended Update SupportRedHatgolang-0:1.26.5-1.el10_0*
Red Hat Enterprise Linux 10.0 Extended Update SupportRedHatignition-0:2.21.0-3.el10_0.4*
Red Hat Enterprise Linux 10.0 Extended Update SupportRedHatosbuild-composer-0:134.1-12.el10_0*
Red Hat Enterprise Linux 10.0 Extended Update SupportRedHatgrafana-0:10.2.6-26.el10_0*
Red Hat Enterprise Linux 10.0 Extended Update SupportRedHatopentelemetry-collector-0:0.152.1-2.el10_0*
Red Hat Enterprise Linux 8RedHatgo-toolset:rhel8-8100020260518131104.a3795dee*
Red Hat Enterprise Linux 8RedHatgrafana-0:9.2.10-33.el8_10*
Red Hat Enterprise Linux 8RedHatcontainer-tools:rhel8-8100020260901110702.afee755d*
Red Hat Enterprise Linux 8RedHatosbuild-composer-0:101.5-3.el8_10*
Red Hat Enterprise Linux 8.8 Telecommunications Update ServiceRedHatosbuild-composer-0:75-10.el8_8*
Red Hat Enterprise Linux 8.8 Update Services for SAP SolutionsRedHatosbuild-composer-0:75-10.el8_8*
Red Hat Enterprise Linux 9RedHatgolang-0:1.26.3-1.el9_8*
Red Hat Enterprise Linux 9RedHatgrafana-0:10.2.6-23.el9_8.3*
Red Hat Enterprise Linux 9RedHatopentelemetry-collector-0:0.152.1-2.el9_8*
Red Hat Enterprise Linux 9RedHatosbuild-composer-0:165.1-4.el9_8.1*
Red Hat Enterprise Linux 9RedHatimage-builder-0:52.1-1.el9_8.2*
Red Hat Enterprise Linux 9.2 Update Services for SAP SolutionsRedHatgolang-0:1.26.5-1.el9_2*
Red Hat Enterprise Linux 9.2 Update Services for SAP SolutionsRedHatosbuild-composer-0:76.1-9.el9_2*
Red Hat Enterprise Linux 9.4 Update Services for SAP SolutionsRedHatgolang-0:1.26.5-1.el9_4*
Red Hat Enterprise Linux 9.4 Update Services for SAP SolutionsRedHatosbuild-composer-0:101.3-4.el9_4.6*
Red Hat Enterprise Linux 9.4 Update Services for SAP SolutionsRedHatopentelemetry-collector-0:0.152.1-2.el9_4*
Red Hat Enterprise Linux 9.6 Extended Update SupportRedHatgolang-0:1.26.5-1.el9_6*
Red Hat Enterprise Linux 9.6 Extended Update SupportRedHatgrafana-0:10.2.6-22.el9_6*
Red Hat Enterprise Linux 9.6 Extended Update SupportRedHatosbuild-composer-0:132.2-12.el9_6*
Red Hat Enterprise Linux 9.6 Extended Update SupportRedHatignition-0:2.21.0-7.el9_6.1*
Red Hat Enterprise Linux 9.6 Extended Update SupportRedHatopentelemetry-collector-0:0.152.1-2.el9_6*
Red Hat OpenShift Container Platform 4.12RedHatcri-o-0:1.25.5-34.rhaos4.12.git6120b13.el8*
Red Hat OpenShift Container Platform 4.12RedHatopenshift-0:4.12.0-202608131627.p2.g0e18cfc.assembly.stream.el8*
Red Hat OpenShift Container Platform 4.13RedHatcri-o-0:1.26.5-32.rhaos4.13.git1088e36.el8*
Red Hat OpenShift Container Platform 4.13RedHatopenshift-0:4.13.0-202608122150.p2.gbbc7c0c.assembly.stream.el8*
Red Hat OpenShift Container Platform 4.14RedHatcri-o-0:1.27.8-19.rhaos4.14.gitcea2db1.el8*
Red Hat OpenShift Container Platform 4.14RedHatose-aws-ecr-image-credential-provider-0:4.14.0-202608131802.p2.g9a7820e.assembly.stream.el8*
Red Hat OpenShift Container Platform 4.15RedHatcri-o-0:1.28.11-14.rhaos4.15.gitf722b2f.el8*
Red Hat OpenShift Container Platform 4.15RedHatopenshift-0:4.15.0-202608131733.p2.g5cb2ef4.assembly.stream.el8*
Red Hat OpenShift Container Platform 4.15RedHatopenshift-clients-0:4.15.0-202608131733.p2.g8231637.assembly.stream.el8*
Red Hat OpenShift Container Platform 4.15RedHatose-aws-ecr-image-credential-provider-0:4.15.0-202608131733.p2.gfd77d92.assembly.stream.el8*
Red Hat OpenShift Container Platform 4.15RedHatose-azure-acr-image-credential-provider-0:4.15.0-202608131733.p2.g5638728.assembly.stream.el8*
Red Hat OpenShift Container Platform 4.15RedHatose-gcp-gcr-image-credential-provider-0:4.15.0-202608131733.p2.gfc50272.assembly.stream.el8*
Red Hat OpenShift Container Platform 4.16RedHatcri-o-0:1.29.13-12.rhaos4.16.git979a5e6.el8*
Red Hat OpenShift Container Platform 4.16RedHatopenshift-0:4.16.0-202608111505.p2.g41c4e9b.assembly.stream.el8*
Red Hat OpenShift Container Platform 4.16RedHatopenshift-clients-0:4.16.0-202608111505.p2.g6f88b58.assembly.stream.el8*
Red Hat OpenShift Container Platform 4.16RedHatose-aws-ecr-image-credential-provider-0:4.16.0-202608111505.p2.ga53e9de.assembly.stream.el8*
Red Hat OpenShift Container Platform 4.16RedHatose-azure-acr-image-credential-provider-0:4.16.0-202608111505.p2.ga3ebdc0.assembly.stream.el8*
Red Hat OpenShift Container Platform 4.16RedHatose-gcp-gcr-image-credential-provider-0:4.16.0-202608111505.p2.g26b43df.assembly.stream.el8*
Red Hat OpenShift Container Platform 4.16RedHatmicroshift-0:4.16.69-202608202336.p0.g763478c.assembly.4.16.69.el9*
Red Hat OpenShift Container Platform 4.17RedHatcri-o-0:1.30.14-11.rhaos4.17.git1e2a16d.el8*
Red Hat OpenShift Container Platform 4.17RedHatopenshift-0:4.17.0-202608132055.p2.g4e295fa.assembly.stream.el8*
Red Hat OpenShift Container Platform 4.17RedHatopenshift-clients-0:4.17.0-202608201812.p2.g7189593.assembly.stream.el8*
Red Hat OpenShift Container Platform 4.17RedHatose-aws-ecr-image-credential-provider-0:4.17.0-202608122146.p2.g144bace.assembly.stream.el8*
Red Hat OpenShift Container Platform 4.17RedHatose-azure-acr-image-credential-provider-0:4.17.0-202608122146.p2.g5bcfbfd.assembly.stream.el8*
Red Hat OpenShift Container Platform 4.17RedHatose-gcp-gcr-image-credential-provider-0:4.17.0-202608122146.p2.g8ce997d.assembly.stream.el8*
Red Hat OpenShift Container Platform 4.18RedHatcri-o-0:1.31.13-11.rhaos4.18.git817a650.el9*
Red Hat OpenShift Container Platform 4.18RedHatopenshift-0:4.18.0-202608132034.p2.g91c2408.assembly.stream.el8*
Red Hat OpenShift Container Platform 4.18RedHatopenshift-clients-0:4.18.0-202608132034.p2.g6febe61.assembly.stream.el8*
Red Hat OpenShift Container Platform 4.18RedHatose-aws-ecr-image-credential-provider-0:4.18.0-202608121933.p2.gc395190.assembly.stream.el8*
Red Hat OpenShift Container Platform 4.18RedHatose-azure-acr-image-credential-provider-0:4.18.0-202608121933.p2.g9795abd.assembly.stream.el8*
Red Hat OpenShift Container Platform 4.18RedHatose-gcp-gcr-image-credential-provider-0:4.18.0-202608121933.p2.g6ea2356.assembly.stream.el8*
Red Hat OpenShift Container Platform 4.18RedHatmicroshift-0:4.18.54-202608211117.p0.g8eb6c29.assembly.4.18.54.el9*
Red Hat OpenShift Container Platform 4.19RedHatcri-o-0:1.32.13-9.rhaos4.19.git2100f27.el9*
Red Hat OpenShift Container Platform 4.19RedHatopenshift-0:4.19.0-202608111604.p2.g63adf01.assembly.stream.el9*
Red Hat OpenShift Container Platform 4.19RedHatopenshift-clients-0:4.19.0-202608111604.p2.gb2a93a6.assembly.stream.el8*
Red Hat OpenShift Container Platform 4.19RedHatose-aws-ecr-image-credential-provider-0:4.19.0-202608111604.p2.g425c1c5.assembly.stream.el9*
Red Hat OpenShift Container Platform 4.19RedHatmicroshift-0:4.19.46-202609041024.p0.g59e34c7.assembly.4.19.46.el9*
Red Hat OpenShift Container Platform 4.19RedHatose-azure-acr-image-credential-provider-0:4.19.0-202609141900.p2.g6282230.assembly.stream.el9*
Red Hat OpenShift Container Platform 4.19RedHatose-gcp-gcr-image-credential-provider-0:4.19.0-202609141900.p2.gd8d3aeb.assembly.stream.el9*
RHEM 1.1 for RHEL 10RedHatflightctl-0:1.1.4-1.el10em*
RHEM 1.1 for RHEL 9RedHatflightctl-0:1.1.4-1.el9em*
Cert Manager support for Red Hat OpenShift release 1.19RedHatcert-manager/jetstack-cert-manager-rhel9:1786613805*
Logging for Red Hat OpenShift 6RedHatopenshift-logging/logging-loki-rhel9:1785419067*
Logging Subsystem for Red Hat OpenShift 6.2RedHatopenshift-logging/logging-loki-rhel9:1784748010*
Logging Subsystem for Red Hat OpenShift 6.4RedHatopenshift-logging/logging-loki-rhel9:1782405469*
Logging Subsystem for Red Hat OpenShift 6.5RedHatopenshift-logging/logging-loki-rhel9:1786645248*
Multicluster engine for Kubernetes 2.11RedHatmulticluster-engine/backplane-rhel9-operator:1786911952*
Multicluster engine for Kubernetes 2.11RedHatmulticluster-engine/hypershift-addon-rhel9-operator:1786912006*
OpenShift API for Data Protection 1.3RedHatoadp/oadp-velero-plugin-rhel9:1785177357*
OpenShift API for Data Protection 1.4RedHatoadp/oadp-velero-plugin-rhel9:1786946116*
OpenShift API for Data Protection 1.5RedHatoadp/oadp-velero-rhel9:1788860461*
OpenShift API for Data Protection 1.6RedHatoadp/oadp-velero-rhel9:1784058822*
Red Hat Advanced Cluster Security 4.9RedHatadvanced-cluster-security/rhacs-main-rhel8:1783357116*
Red Hat Advanced Cluster Security for Kubernetes 4.10RedHatadvanced-cluster-security/rhacs-main-rhel8:1783357140*
Red Hat Developer Hub 1.10RedHatrhdh/rhdh-rhel9-operator:1783447707*
Red Hat Developer Hub 1.9RedHatrhdh/rhdh-rhel9-operator:1782767215*
Red Hat Edge Manager 1.1RedHatrhem/flightctl-api-rhel10:1789485939*
Red Hat Edge Manager 1.1RedHatrhem/flightctl-api-rhel9:1789487080*
Red Hat Hardened ImagesRedHatgolang1-25-main-1.25.10-2.2.hum1*
Red Hat Hardened ImagesRedHatgolang1-26-main-1.26.3-2.2.hum1*
Red Hat Lightspeed (formerly Insights) for Runtimes 1.0RedHatrh-lightspeed-runtimes/runtimes-inventory-rhel9-operator:1790194122*
Red Hat Migration Toolkit 1.8RedHatrhmtc/openshift-migration-controller-rhel8:1783953372*
Red Hat Migration Toolkit for Applications 8.1RedHatmta/mta-cli-rhel9:1785171639*
Red Hat Migration Toolkit for Applications 8.2RedHatmta/mta-cli-rhel9:1784211378*
Red Hat OpenShift AI 2.25RedHatrhoai/odh-kueue-controller-rhel9:1783544461*
Red Hat OpenShift AI 3.4RedHatrhoai/odh-kube-auth-proxy-rhel9:1787102977*
Red Hat OpenShift AI 3.4RedHatrhoai/odh-mod-arch-gen-ai-rhel9:1786611759*
Red Hat OpenShift AI 3.4RedHatrhoai/odh-workload-variant-autoscaler-controller-rhel9:1787562200*
Red Hat OpenShift Container Platform 4.12RedHatopenshift4/ose-installer:1786752886*
Red Hat OpenShift Container Platform 4.13RedHatopenshift4/ose-installer:1788845531*
Red Hat OpenShift Container Platform 4.14RedHatopenshift4/ose-sdn-rhel8:1787002807*
Red Hat OpenShift Container Platform 4.15RedHatopenshift4/ose-sdn-rhel9:1787055135*
Red Hat OpenShift Container Platform 4.16RedHatopenshift4/ose-sdn-rhel9:1786788280*
Red Hat OpenShift Container Platform 4.17RedHatopenshift4/ose-cli-rhel9:1787549445*
Red Hat OpenShift Container Platform 4.18RedHatopenshift4/ose-cli-rhel9:1786754308*
Red Hat OpenShift Container Platform 4.19RedHatopenshift4/ose-cli-rhel9:1786489910*
Red Hat OpenShift Container Platform 4.20RedHatopenshift4/ose-cli-rhel9:1786494900*
Red Hat OpenShift Container Platform 4.21RedHatopenshift4/ose-cli-rhel9:1786496647*
Red Hat OpenShift Container Platform 4.21RedHatopenshift4/ose-hypershift-rhel9:1786573075*
Red Hat OpenShift Dev Spaces 3.30RedHatdevspaces/configbump-rhel9:1787756267*
Red Hat OpenShift Dev Spaces 3.30RedHatdevspaces/traefik-rhel9:1787756799*
Red Hat OpenShift Service Mesh 3.0RedHatopenshift-service-mesh/istio-cni-rhel9:1782222217*
Red Hat OpenShift Service Mesh 3.0RedHatopenshift-service-mesh/istio-pilot-rhel9:1782223341*
Red Hat OpenShift Service Mesh 3.0RedHatopenshift-service-mesh/istio-proxyv2-rhel9:1782296193*
Red Hat OpenShift Service Mesh 3.0RedHatopenshift-service-mesh/istio-rhel9-operator:1782222607*
Red Hat OpenShift Service Mesh 3.1RedHatopenshift-service-mesh/istio-cni-rhel9:1782222163*
Red Hat OpenShift Service Mesh 3.1RedHatopenshift-service-mesh/istio-pilot-rhel9:1782223138*
Red Hat OpenShift Service Mesh 3.1RedHatopenshift-service-mesh/istio-proxyv2-rhel9:1782222394*
Red Hat OpenShift Service Mesh 3.1RedHatopenshift-service-mesh/istio-rhel9-operator:1782222451*
Red Hat OpenShift Service Mesh 3.2RedHatopenshift-service-mesh/istio-cni-rhel9:1782226178*
Red Hat OpenShift Service Mesh 3.2RedHatopenshift-service-mesh/istio-pilot-rhel9:1782224487*
Red Hat OpenShift Service Mesh 3.2RedHatopenshift-service-mesh/istio-proxyv2-rhel9:1782303211*
Red Hat OpenShift Service Mesh 3.2RedHatopenshift-service-mesh/istio-rhel9-operator:1782224541*
Red Hat OpenShift Service Mesh 3.3RedHatopenshift-service-mesh/istio-cni-rhel9:1782223045*
Red Hat OpenShift Service Mesh 3.3RedHatopenshift-service-mesh/istio-pilot-rhel9:1782222366*
Red Hat OpenShift Service Mesh 3.3RedHatopenshift-service-mesh/istio-proxyv2-rhel9:1782310747*
Red Hat OpenShift Service Mesh 3.3RedHatopenshift-service-mesh/istio-rhel9-operator:1782222038*
Red Hat OpenShift Workload Availability 0.12RedHatworkload-availability/node-healthcheck-rhel9-operator:1785202723*
Red Hat OpenShift Workload Availability 0.13RedHatworkload-availability/self-node-remediation-rhel9-operator:1785203036*
Red Hat OpenShift Workload Availability 0.3RedHatworkload-availability/storage-based-remediation-rhel9-operator:1785203474*
Red Hat OpenShift Workload Availability 0.7RedHatworkload-availability/machine-deletion-remediation-rhel9-operator:1785203508*
Red Hat OpenShift Workload Availability 0.8RedHatworkload-availability/fence-agents-remediation-rhel9-operator:1785203079*
Red Hat OpenShift Workload Availability 5.7RedHatworkload-availability/node-maintenance-rhel9-operator:1785202847*
Red Hat Quay 3.10RedHatquay/quay-rhel8:1783750447*
Red Hat Quay 3.12RedHatquay/quay-rhel8:1783751865*
Red Hat Quay 3.12RedHatquay/quay-rhel8:1784353904*
Red Hat Quay 3.14RedHatquay/quay-rhel8:1788593843*
Red Hat Quay 3.15RedHatquay/quay-rhel8:1784351966*
Red Hat Quay 3.16RedHatquay/quay-rhel9:1783955846*
Red Hat Quay 3.9RedHatquay/quay-rhel8:1784125838*
Red Hat Satellite 6.18RedHatsatellite/iop-vmaas-rhel9:1789611858*
Red Hat Satellite 6.19RedHatsatellite/iop-vmaas-rhel9:1789611998*
Red Hat Trusted Artifact Signer 1.4RedHatconforma-cli-stack-v1-4-1.4.2*
Red Hat Trusted Artifact Signer 1.4RedHatconforma-cli-stack-v1-4-1.4.2*
Red Hat Trusted Artifact Signer 1.4RedHatconforma-cli-stack-v1-4-1.4.3*
Red Hat Trusted Artifact Signer 1.4RedHatconforma-cli-stack-v1-4-1.4.3*
Red Hat Trusted Artifact Signer 1.4RedHatconforma-cli-stack-v1-4-1.4.3*
Golang-1.10Ubuntuesm-infra/xenial*
Golang-1.13Ubuntuesm-apps/xenial*
Golang-1.18Ubuntuesm-apps/xenial*
Golang-1.23Ubuntuquesting*
Golang-1.24Ubuntuquesting*
Golang-1.25Ubuntuquesting*
Golang-1.6Ubuntuesm-infra/xenial*

References

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2026 Aqua Security Software Ltd.   Privacy Policy | Terms of Use