RHSA-2026:3816 — Red Hat Security Advisory: grafana-pcp security update
The source describes three related vulnerabilities in Go components. A specially crafted HTTP request can cause excessive memory consumption and denial of service (DoS). A specially crafted certificate can also cause excessive resource consumption and DoS. During TLS session resumption, changes to certificate authority settings may allow certificate-validation bypass and, under specific conditions, authentication bypass.
CERT24