RHSA-2026:3814 — Red Hat Security Advisory: go-rpm-macros security update
A flaw in the Go standard library net/url package means that it does not limit the number of unique query parameters it parses. A specially crafted HTTP request with a massive number of query parameters can cause excessive memory consumption, leading to an application crash or unresponsiveness and resulting in denial of service.
CERT24