CVE-2026-63209, CoreCVE

Back Back to CVE browser

HIGH

Integer Overflow or Wraparound and Out-of-bounds Write in compress

Published Sep 29, 2026

7.5

HIGH

CVSS 3.1

EPSS 0.36%

Description

compress provides various compression algorithms. Prior to version 1.18.7, a signed integer overflow vulnerability in s2.NewDict() allows an attacker to bypass repeat index validation by supplying a dictionary with a uvarint-encoded repeat value exceeding MaxInt64. When Dict.Encode() is subsequently called, the overflowed negative repeat value causes an out-of-bounds memory access via unsafe.Pointer arithmetic, crashing the process with SIGSEGV. This issue has been patched in version 1.18.7.

Affected products

Vendor Klauspost Product Compress Default
n/a
- Version
  < 1.18.7
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Klauspost

Compress

n/a

Version	Status	Constraints
< 1.18.7	affected	-

Cryostat 4

cryostat/cryostat-storage-rhel9

Under investigation
Custom Metric Autoscaler operator for Red Hat Openshift

custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9

Under investigation
Custom Metric Autoscaler operator for Red Hat Openshift

custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9

Under investigation
Custom Metric Autoscaler operator for Red Hat Openshift

custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9

Under investigation
Custom Metric Autoscaler operator for Red Hat Openshift

custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator

Under investigation
File Integrity Operator

compliance/openshift-file-integrity-operator-bundle

Under investigation
File Integrity Operator

compliance/openshift-file-integrity-rhel8-operator

Under investigation
Logging Subsystem for Red Hat OpenShift

openshift-logging/cluster-logging-rhel9-operator

Under investigation
Logging Subsystem for Red Hat OpenShift

openshift-logging/logging-loki-rhel9

Under investigation
Multicluster Engine for Kubernetes

multicluster-engine/assisted-service-8-rhel8

Under investigation
Multicluster Engine for Kubernetes

multicluster-engine/assisted-service-9-rhel9

Under investigation
Multicluster Global Hub

multicluster-globalhub/multicluster-globalhub-grafana-rhel9

Under investigation
Network Observability Operator

network-observability/network-observability-ebpf-agent-rhel9

Under investigation
Network Observability Operator

network-observability/network-observability-flowlogs-pipeline-rhel9

Under investigation
OpenShift API for Data Protection

oadp/oadp-cli-binaries-rhel9

Under investigation
OpenShift API for Data Protection

oadp/oadp-mustgather-rhel9

Under investigation
OpenShift API for Data Protection

oadp/oadp-rhel9-operator

Under investigation
OpenShift API for Data Protection

oadp/oadp-velero-restic-restore-helper-rhel9

Under investigation
OpenShift API for Data Protection

oadp/oadp-velero-rhel9

Under investigation
Red Hat Advanced Cluster Management for Kubernetes 2

rhacm2/acm-grafana-rhel9

Under investigation
Red Hat Advanced Cluster Management for Kubernetes 2

rhacm2/lighthouse-coredns-rhel9

Under investigation
Red Hat Advanced Cluster Management for Kubernetes 2

rhacm2/prometheus-rhel9

Under investigation
Red Hat Advanced Cluster Management for Kubernetes 2

rhacm2/thanos-receive-controller-rhel9

Under investigation
Red Hat Advanced Cluster Management for Kubernetes 2

rhacm2/thanos-rhel9

Under investigation
Red Hat Advanced Cluster Management for Kubernetes 2

rhacm2/volsync-rhel9

Under investigation
Red Hat Advanced Cluster Security 4

advanced-cluster-security/rhacs-main-rhel9

Under investigation
Red Hat Advanced Cluster Security 4

advanced-cluster-security/rhacs-operator-bundle

Under investigation
Red Hat Advanced Cluster Security 4

advanced-cluster-security/rhacs-rhel9-operator

Under investigation
Red Hat Advanced Cluster Security 4

advanced-cluster-security/rhacs-roxctl-rhel9

Under investigation
Red Hat Advanced Cluster Security 4

advanced-cluster-security/rhacs-scanner-v4-rhel9

Under investigation
Red Hat Advanced Cluster Security 4

rhacs-eng/release-main

Under investigation
Red Hat Advanced Cluster Security 4

rhacs-eng/release-operator

Under investigation
Red Hat Advanced Cluster Security 4

rhacs-eng/release-roxctl

Under investigation
Red Hat Advanced Cluster Security 4

rhacs-eng/release-scanner-v4

Under investigation
Red Hat Ceph Storage 6

rhceph/rhceph-6-dashboard-rhel9

Under investigation
Red Hat Ceph Storage 7

rhceph/grafana-rhel9

Under investigation
Red Hat Ceph Storage 8

rhceph/grafana-rhel9

Under investigation
Red Hat Ceph Storage 9

rhceph-ci/alloy

Under investigation
Red Hat Ceph Storage 9

rhceph-ci/grafana

Under investigation
Red Hat Ceph Storage 9

rhceph/alloy-rhel10

Under investigation
Red Hat Ceph Storage 9

rhceph/grafana-rhel10

Under investigation
Red Hat Enterprise Linux 10

grafana

Under investigation
Red Hat Enterprise Linux 10

opentelemetry-collector

Under investigation
Red Hat Enterprise Linux 9

opentelemetry-collector

Under investigation
Red Hat Hardened Images

buildah

Affected
Red Hat Hardened Images

caddy

Affected
Red Hat Hardened Images

containers-common

Not affected
Red Hat Hardened Images

cosign

Affected
Red Hat Hardened Images

distribution

Affected
Red Hat Hardened Images

git-sync

Not affected
Red Hat Hardened Images

grafana12.4

Affected
Red Hat Hardened Images

grafana13.1

Affected
Red Hat Hardened Images

grafana13.2

Affected
Red Hat Hardened Images

grype

Affected
Red Hat Hardened Images

helm3

Affected
Red Hat Hardened Images

helm4

Affected
Red Hat Hardened Images

jaeger

Affected
Red Hat Hardened Images

k6v1

Affected
Red Hat Hardened Images

k6v2

Affected
Red Hat Hardened Images

loki3.6

Affected
Red Hat Hardened Images

loki3.7

Affected
Red Hat Hardened Images

nats-server2.12

Affected
Red Hat Hardened Images

nats-server2.14

Affected
Red Hat Hardened Images

opentelemetry-collector

Affected
Red Hat Hardened Images

opentelemetry-collector-contrib

Affected
Red Hat Hardened Images

opentelemetry-collector-k8s

Affected
Red Hat Hardened Images

opentofu1.10

Affected
Red Hat Hardened Images

opentofu1.11

Will not fix
Red Hat Hardened Images

opentofu1.12

Affected
Red Hat Hardened Images

podman

Affected
Red Hat Hardened Images

prometheus3.13

Affected
Red Hat Hardened Images

prometheus3.5

Will not fix
Red Hat Hardened Images

rekor

Affected
Red Hat Hardened Images

skopeo

Affected
Red Hat Hardened Images

spire1.14

Affected
Red Hat Hardened Images

spire1.15

Affected
Red Hat Hardened Images

syft

Affected
Red Hat Hardened Images

tempo2.10

Affected
Red Hat Hardened Images

tempo3.0

Affected
Red Hat Hardened Images

trivy

Affected
Red Hat OpenShift AI (RHOAI)

rhoai/odh-data-science-pipelines-argo-argoexec-rhel9

Under investigation
Red Hat OpenShift AI (RHOAI)

rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9

Under investigation
Red Hat OpenShift AI (RHOAI)

rhoai/odh-data-science-pipelines-operator-controller-rhel9

Under investigation
Red Hat OpenShift AI (RHOAI)

rhoai/odh-kserve-agent-rhel9

Under investigation
Red Hat OpenShift AI (RHOAI)

rhoai/odh-kserve-controller-rhel9

Under investigation
Red Hat OpenShift AI (RHOAI)

rhoai/odh-kserve-llmisvc-controller-rhel9

Under investigation
Red Hat OpenShift AI (RHOAI)

rhoai/odh-kserve-localmodel-controller-rhel9

Under investigation
Red Hat OpenShift AI (RHOAI)

rhoai/odh-kserve-localmodelnode-agent-rhel9

Under investigation
Red Hat OpenShift AI (RHOAI)

rhoai/odh-kserve-router-rhel9

Under investigation
Red Hat OpenShift AI (RHOAI)

rhoai/odh-ml-pipelines-api-server-v2-rhel9

Under investigation
Red Hat OpenShift AI (RHOAI)

rhoai/odh-ml-pipelines-driver-rhel9

Under investigation
Red Hat OpenShift AI (RHOAI)

rhoai/odh-ml-pipelines-launcher-rhel9

Under investigation
Red Hat OpenShift AI (RHOAI)

rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9

Under investigation
Red Hat OpenShift AI (RHOAI)

rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9

Under investigation
Red Hat OpenShift Container Platform 4

openshift4/ose-agent-installer-api-server-rhel8

Under investigation
Red Hat OpenShift Container Platform 4

openshift4/ose-agent-installer-api-server-rhel9

Under investigation
Red Hat OpenShift Container Platform 4

openshift4/ose-cluster-monitoring-rhel9-operator

Under investigation
Red Hat OpenShift Container Platform 4

openshift4/ose-prometheus-rhel9

Under investigation
Red Hat OpenShift Container Platform 4

openshift4/ose-thanos-rhel8

Under investigation
Red Hat OpenShift Container Platform 4

openshift4/ose-thanos-rhel9

Under investigation
Red Hat OpenShift GitOps

microshift-gitops

Under investigation
Red Hat OpenShift GitOps

openshift-gitops-1/argocd-agent-rhel8

Under investigation
Red Hat OpenShift GitOps

openshift-gitops-1/argocd-agent-rhel9

Under investigation
Red Hat OpenShift GitOps

openshift-gitops-1/argocd-image-updater-rhel8

Under investigation
Red Hat OpenShift GitOps

openshift-gitops-1/argocd-image-updater-rhel9

Under investigation
Red Hat OpenShift GitOps

openshift-gitops-1/argocd-rhel8

Under investigation
Red Hat OpenShift GitOps

openshift-gitops-1/argocd-rhel9

Under investigation
Red Hat OpenShift GitOps

openshift-gitops-1/gitops-rhel8

Under investigation
Red Hat OpenShift GitOps

openshift-gitops-1/gitops-rhel8-operator

Under investigation
Red Hat OpenShift GitOps

openshift-gitops-1/gitops-rhel9

Under investigation
Red Hat OpenShift GitOps

openshift-gitops-1/gitops-rhel9-operator

Under investigation
Red Hat OpenShift GitOps

openshift-gitops-argocd-cli

Under investigation
Red Hat OpenShift distributed tracing 3

rhosdt/opentelemetry-collector-rhel9

Under investigation
Red Hat OpenShift distributed tracing 3

rhosdt/opentelemetry-rhel9-operator

Under investigation
Red Hat OpenShift distributed tracing 3

rhosdt/opentelemetry-target-allocator-rhel9

Under investigation
Red Hat OpenShift distributed tracing 3

rhosdt/tempo-jaeger-query-rhel9

Under investigation
Red Hat OpenShift distributed tracing 3

rhosdt/tempo-query-rhel9

Under investigation
Red Hat OpenShift distributed tracing 3

rhosdt/tempo-rhel9

Under investigation
Red Hat Openshift Data Foundation 4

rhceph-dev/odf4-odf-multicluster-rhel9-operator

Under investigation
Red Hat Quay 3

quay/clair-rhel8

Under investigation
Red Hat Quay 3

quay/clair-rhel9

Under investigation
Red Hat Quay 3

quay/quay-operator-rhel8

Under investigation
Red Hat Quay 3

quay/quay-operator-rhel9

Under investigation
Red Hat Quay 3

quay/quay-rhel8

Under investigation
Red Hat Quay 3

quay/quay-rhel9

Under investigation
Red Hat Trusted Artifact Signer

rhtas/ec-rhel9

Under investigation

Product	Package	State	Advisory
Cryostat 4	cryostat/cryostat-storage-rhel9	Under investigation	n/a
Custom Metric Autoscaler operator for Red Hat Openshift	custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9	Under investigation	n/a
Custom Metric Autoscaler operator for Red Hat Openshift	custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9	Under investigation	n/a
Custom Metric Autoscaler operator for Red Hat Openshift	custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9	Under investigation	n/a
Custom Metric Autoscaler operator for Red Hat Openshift	custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9-operator	Under investigation	n/a
File Integrity Operator	compliance/openshift-file-integrity-operator-bundle	Under investigation	n/a
File Integrity Operator	compliance/openshift-file-integrity-rhel8-operator	Under investigation	n/a
Logging Subsystem for Red Hat OpenShift	openshift-logging/cluster-logging-rhel9-operator	Under investigation	n/a
Logging Subsystem for Red Hat OpenShift	openshift-logging/logging-loki-rhel9	Under investigation	n/a
Multicluster Engine for Kubernetes	multicluster-engine/assisted-service-8-rhel8	Under investigation	n/a
Multicluster Engine for Kubernetes	multicluster-engine/assisted-service-9-rhel9	Under investigation	n/a
Multicluster Global Hub	multicluster-globalhub/multicluster-globalhub-grafana-rhel9	Under investigation	n/a
Network Observability Operator	network-observability/network-observability-ebpf-agent-rhel9	Under investigation	n/a
Network Observability Operator	network-observability/network-observability-flowlogs-pipeline-rhel9	Under investigation	n/a
OpenShift API for Data Protection	oadp/oadp-cli-binaries-rhel9	Under investigation	n/a
OpenShift API for Data Protection	oadp/oadp-mustgather-rhel9	Under investigation	n/a
OpenShift API for Data Protection	oadp/oadp-rhel9-operator	Under investigation	n/a
OpenShift API for Data Protection	oadp/oadp-velero-restic-restore-helper-rhel9	Under investigation	n/a
OpenShift API for Data Protection	oadp/oadp-velero-rhel9	Under investigation	n/a
Red Hat Advanced Cluster Management for Kubernetes 2	rhacm2/acm-grafana-rhel9	Under investigation	n/a
Red Hat Advanced Cluster Management for Kubernetes 2	rhacm2/lighthouse-coredns-rhel9	Under investigation	n/a
Red Hat Advanced Cluster Management for Kubernetes 2	rhacm2/prometheus-rhel9	Under investigation	n/a
Red Hat Advanced Cluster Management for Kubernetes 2	rhacm2/thanos-receive-controller-rhel9	Under investigation	n/a
Red Hat Advanced Cluster Management for Kubernetes 2	rhacm2/thanos-rhel9	Under investigation	n/a
Red Hat Advanced Cluster Management for Kubernetes 2	rhacm2/volsync-rhel9	Under investigation	n/a
Red Hat Advanced Cluster Security 4	advanced-cluster-security/rhacs-main-rhel9	Under investigation	n/a
Red Hat Advanced Cluster Security 4	advanced-cluster-security/rhacs-operator-bundle	Under investigation	n/a
Red Hat Advanced Cluster Security 4	advanced-cluster-security/rhacs-rhel9-operator	Under investigation	n/a
Red Hat Advanced Cluster Security 4	advanced-cluster-security/rhacs-roxctl-rhel9	Under investigation	n/a
Red Hat Advanced Cluster Security 4	advanced-cluster-security/rhacs-scanner-v4-rhel9	Under investigation	n/a
Red Hat Advanced Cluster Security 4	rhacs-eng/release-main	Under investigation	n/a
Red Hat Advanced Cluster Security 4	rhacs-eng/release-operator	Under investigation	n/a
Red Hat Advanced Cluster Security 4	rhacs-eng/release-roxctl	Under investigation	n/a
Red Hat Advanced Cluster Security 4	rhacs-eng/release-scanner-v4	Under investigation	n/a
Red Hat Ceph Storage 6	rhceph/rhceph-6-dashboard-rhel9	Under investigation	n/a
Red Hat Ceph Storage 7	rhceph/grafana-rhel9	Under investigation	n/a
Red Hat Ceph Storage 8	rhceph/grafana-rhel9	Under investigation	n/a
Red Hat Ceph Storage 9	rhceph-ci/alloy	Under investigation	n/a
Red Hat Ceph Storage 9	rhceph-ci/grafana	Under investigation	n/a
Red Hat Ceph Storage 9	rhceph/alloy-rhel10	Under investigation	n/a
Red Hat Ceph Storage 9	rhceph/grafana-rhel10	Under investigation	n/a
Red Hat Enterprise Linux 10	grafana	Under investigation	n/a
Red Hat Enterprise Linux 10	opentelemetry-collector	Under investigation	n/a
Red Hat Enterprise Linux 9	opentelemetry-collector	Under investigation	n/a
Red Hat Hardened Images	buildah	Affected	n/a
Red Hat Hardened Images	caddy	Affected	n/a
Red Hat Hardened Images	containers-common	Not affected	n/a
Red Hat Hardened Images	cosign	Affected	n/a
Red Hat Hardened Images	distribution	Affected	n/a
Red Hat Hardened Images	git-sync	Not affected	n/a
Red Hat Hardened Images	grafana12.4	Affected	n/a
Red Hat Hardened Images	grafana13.1	Affected	n/a
Red Hat Hardened Images	grafana13.2	Affected	n/a
Red Hat Hardened Images	grype	Affected	n/a
Red Hat Hardened Images	helm3	Affected	n/a
Red Hat Hardened Images	helm4	Affected	n/a
Red Hat Hardened Images	jaeger	Affected	n/a
Red Hat Hardened Images	k6v1	Affected	n/a
Red Hat Hardened Images	k6v2	Affected	n/a
Red Hat Hardened Images	loki3.6	Affected	n/a
Red Hat Hardened Images	loki3.7	Affected	n/a
Red Hat Hardened Images	nats-server2.12	Affected	n/a
Red Hat Hardened Images	nats-server2.14	Affected	n/a
Red Hat Hardened Images	opentelemetry-collector	Affected	n/a
Red Hat Hardened Images	opentelemetry-collector-contrib	Affected	n/a
Red Hat Hardened Images	opentelemetry-collector-k8s	Affected	n/a
Red Hat Hardened Images	opentofu1.10	Affected	n/a
Red Hat Hardened Images	opentofu1.11	Will not fix	n/a
Red Hat Hardened Images	opentofu1.12	Affected	n/a
Red Hat Hardened Images	podman	Affected	n/a
Red Hat Hardened Images	prometheus3.13	Affected	n/a
Red Hat Hardened Images	prometheus3.5	Will not fix	n/a
Red Hat Hardened Images	rekor	Affected	n/a
Red Hat Hardened Images	skopeo	Affected	n/a
Red Hat Hardened Images	spire1.14	Affected	n/a
Red Hat Hardened Images	spire1.15	Affected	n/a
Red Hat Hardened Images	syft	Affected	n/a
Red Hat Hardened Images	tempo2.10	Affected	n/a
Red Hat Hardened Images	tempo3.0	Affected	n/a
Red Hat Hardened Images	trivy	Affected	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-data-science-pipelines-argo-argoexec-rhel9	Under investigation	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9	Under investigation	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-data-science-pipelines-operator-controller-rhel9	Under investigation	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-kserve-agent-rhel9	Under investigation	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-kserve-controller-rhel9	Under investigation	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-kserve-llmisvc-controller-rhel9	Under investigation	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-kserve-localmodel-controller-rhel9	Under investigation	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-kserve-localmodelnode-agent-rhel9	Under investigation	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-kserve-router-rhel9	Under investigation	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-ml-pipelines-api-server-v2-rhel9	Under investigation	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-ml-pipelines-driver-rhel9	Under investigation	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-ml-pipelines-launcher-rhel9	Under investigation	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9	Under investigation	n/a
Red Hat OpenShift AI (RHOAI)	rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9	Under investigation	n/a
Red Hat OpenShift Container Platform 4	openshift4/ose-agent-installer-api-server-rhel8	Under investigation	n/a
Red Hat OpenShift Container Platform 4	openshift4/ose-agent-installer-api-server-rhel9	Under investigation	n/a
Red Hat OpenShift Container Platform 4	openshift4/ose-cluster-monitoring-rhel9-operator	Under investigation	n/a
Red Hat OpenShift Container Platform 4	openshift4/ose-prometheus-rhel9	Under investigation	n/a
Red Hat OpenShift Container Platform 4	openshift4/ose-thanos-rhel8	Under investigation	n/a
Red Hat OpenShift Container Platform 4	openshift4/ose-thanos-rhel9	Under investigation	n/a
Red Hat OpenShift GitOps	microshift-gitops	Under investigation	n/a
Red Hat OpenShift GitOps	openshift-gitops-1/argocd-agent-rhel8	Under investigation	n/a
Red Hat OpenShift GitOps	openshift-gitops-1/argocd-agent-rhel9	Under investigation	n/a
Red Hat OpenShift GitOps	openshift-gitops-1/argocd-image-updater-rhel8	Under investigation	n/a
Red Hat OpenShift GitOps	openshift-gitops-1/argocd-image-updater-rhel9	Under investigation	n/a
Red Hat OpenShift GitOps	openshift-gitops-1/argocd-rhel8	Under investigation	n/a
Red Hat OpenShift GitOps	openshift-gitops-1/argocd-rhel9	Under investigation	n/a
Red Hat OpenShift GitOps	openshift-gitops-1/gitops-rhel8	Under investigation	n/a
Red Hat OpenShift GitOps	openshift-gitops-1/gitops-rhel8-operator	Under investigation	n/a
Red Hat OpenShift GitOps	openshift-gitops-1/gitops-rhel9	Under investigation	n/a
Red Hat OpenShift GitOps	openshift-gitops-1/gitops-rhel9-operator	Under investigation	n/a
Red Hat OpenShift GitOps	openshift-gitops-argocd-cli	Under investigation	n/a
Red Hat OpenShift distributed tracing 3	rhosdt/opentelemetry-collector-rhel9	Under investigation	n/a
Red Hat OpenShift distributed tracing 3	rhosdt/opentelemetry-rhel9-operator	Under investigation	n/a
Red Hat OpenShift distributed tracing 3	rhosdt/opentelemetry-target-allocator-rhel9	Under investigation	n/a
Red Hat OpenShift distributed tracing 3	rhosdt/tempo-jaeger-query-rhel9	Under investigation	n/a
Red Hat OpenShift distributed tracing 3	rhosdt/tempo-query-rhel9	Under investigation	n/a
Red Hat OpenShift distributed tracing 3	rhosdt/tempo-rhel9	Under investigation	n/a
Red Hat Openshift Data Foundation 4	rhceph-dev/odf4-odf-multicluster-rhel9-operator	Under investigation	n/a
Red Hat Quay 3	quay/clair-rhel8	Under investigation	n/a
Red Hat Quay 3	quay/clair-rhel9	Under investigation	n/a
Red Hat Quay 3	quay/quay-operator-rhel8	Under investigation	n/a
Red Hat Quay 3	quay/quay-operator-rhel9	Under investigation	n/a
Red Hat Quay 3	quay/quay-rhel8	Under investigation	n/a
Red Hat Quay 3	quay/quay-rhel9	Under investigation	n/a
Red Hat Trusted Artifact Signer	rhtas/ec-rhel9	Under investigation	n/a

Ecosystem	Package	Introduced	Fixed
Go	github.com/klauspost/compress	1.16.0	1.18.7

Remediation

No remediation recorded yet.

Metrics

Weaknesses (3)

CWE-190

Integer Overflow

CWE-787

Out-of-bounds Write

CWE-823

References (7)

https://access.redhat.com/security/cve/CVE-2026-63209
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2543236
Issue Tracking
https://github.com/klauspost/compress/commit/539243b8823ee8f03e49969823d57c348c917536
x_refsource_MISC
https://github.com/klauspost/compress/releases/tag/v1.18.7
x_refsource_MISC
https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw
exploitx_refsource_CONFIRM
https://nvd.nist.gov/vuln/detail/CVE-2026-63209
https://www.cve.org/CVERecord?id=CVE-2026-63209

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2026-63209		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2543236		Issue Tracking
https://github.com/klauspost/compress/commit/539243b8823ee8f03e49969823d57c348c917536		x_refsource_MISC
https://github.com/klauspost/compress/releases/tag/v1.18.7		x_refsource_MISC
https://github.com/klauspost/compress/security/advisories/GHSA-259r-337f-4rfw		exploitx_refsource_CONFIRM
https://nvd.nist.gov/vuln/detail/CVE-2026-63209
https://www.cve.org/CVERecord?id=CVE-2026-63209