CVE-2026-35469Published
spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 frame parser does not validate attacker-controlled counts and lengths before allocating memory. Three allocation paths are af…
Exact source revision recorded 25 Oct 2026 08:17:41 UTC. It does not establish the source's current position. Latest evidence.
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-35469 · Microsoft / collected KEV context
nvd · CVE-2026-35469
- https://github.com/moby/spdystream/releases/tag/v0.5.1
- https://github.com/moby/spdystream/security/advisories/GHSA-pc3f-x583-g7j2
- https://access.redhat.com/errata/RHSA-2026:11070
- https://access.redhat.com/errata/RHSA-2026:11217
- https://access.redhat.com/errata/RHSA-2026:12118
- https://access.redhat.com/errata/RHSA-2026:13791
- https://access.redhat.com/errata/RHSA-2026:13829
- https://access.redhat.com/errata/RHSA-2026:17121
- https://access.redhat.com/errata/RHSA-2026:17123
- https://access.redhat.com/errata/RHSA-2026:17449
- https://access.redhat.com/errata/RHSA-2026:17468
- https://access.redhat.com/errata/RHSA-2026:17469
- https://access.redhat.com/errata/RHSA-2026:17475
- https://access.redhat.com/errata/RHSA-2026:17598
- https://access.redhat.com/errata/RHSA-2026:17599
- https://access.redhat.com/errata/RHSA-2026:17704
- https://access.redhat.com/errata/RHSA-2026:19099
- https://access.redhat.com/errata/RHSA-2026:19108
- https://access.redhat.com/errata/RHSA-2026:20034
- https://access.redhat.com/errata/RHSA-2026:20041
- https://access.redhat.com/errata/RHSA-2026:20042
- https://access.redhat.com/errata/RHSA-2026:20089
- https://access.redhat.com/errata/RHSA-2026:21658
- https://access.redhat.com/errata/RHSA-2026:21692
- https://access.redhat.com/errata/RHSA-2026:21697
- https://access.redhat.com/errata/RHSA-2026:23235
- https://access.redhat.com/errata/RHSA-2026:25009
- https://access.redhat.com/errata/RHSA-2026:25046
- https://access.redhat.com/errata/RHSA-2026:25187
- https://access.redhat.com/errata/RHSA-2026:25194
- https://access.redhat.com/errata/RHSA-2026:25201
- https://access.redhat.com/errata/RHSA-2026:25207
- https://access.redhat.com/errata/RHSA-2026:27004
- https://access.redhat.com/errata/RHSA-2026:27010
- https://access.redhat.com/errata/RHSA-2026:27063
- https://access.redhat.com/errata/RHSA-2026:27903
- https://access.redhat.com/errata/RHSA-2026:27914
- https://access.redhat.com/errata/RHSA-2026:27941
- https://access.redhat.com/errata/RHSA-2026:27983
- https://access.redhat.com/errata/RHSA-2026:29795
- https://access.redhat.com/errata/RHSA-2026:29801
- https://access.redhat.com/errata/RHSA-2026:29835
- https://access.redhat.com/errata/RHSA-2026:29857
- https://access.redhat.com/errata/RHSA-2026:29858
- https://access.redhat.com/errata/RHSA-2026:29865
- https://access.redhat.com/errata/RHSA-2026:33071
- https://access.redhat.com/errata/RHSA-2026:33078
- https://access.redhat.com/errata/RHSA-2026:34050
- https://access.redhat.com/errata/RHSA-2026:34099
- https://access.redhat.com/errata/RHSA-2026:34100
- https://access.redhat.com/errata/RHSA-2026:34755
- https://access.redhat.com/errata/RHSA-2026:34766
- https://access.redhat.com/errata/RHSA-2026:34769
- https://access.redhat.com/errata/RHSA-2026:34791
- https://access.redhat.com/errata/RHSA-2026:34794
- https://access.redhat.com/errata/RHSA-2026:36162
- https://access.redhat.com/errata/RHSA-2026:36621
- https://access.redhat.com/errata/RHSA-2026:36796
- https://access.redhat.com/errata/RHSA-2026:37187
- https://access.redhat.com/errata/RHSA-2026:37193
- https://access.redhat.com/errata/RHSA-2026:37387
- https://access.redhat.com/errata/RHSA-2026:37580
- https://access.redhat.com/errata/RHSA-2026:37581
- https://access.redhat.com/errata/RHSA-2026:37629
- https://access.redhat.com/errata/RHSA-2026:40022
- https://access.redhat.com/errata/RHSA-2026:40023
- https://access.redhat.com/errata/RHSA-2026:40030
- https://access.redhat.com/errata/RHSA-2026:40828
- https://access.redhat.com/errata/RHSA-2026:41019
- https://access.redhat.com/errata/RHSA-2026:43227
- https://access.redhat.com/errata/RHSA-2026:43253
- https://access.redhat.com/errata/RHSA-2026:44237
- https://access.redhat.com/errata/RHSA-2026:44267
- https://access.redhat.com/errata/RHSA-2026:47728
- https://access.redhat.com/errata/RHSA-2026:47729
- https://access.redhat.com/errata/RHSA-2026:51007
- https://access.redhat.com/errata/RHSA-2026:51013
- https://access.redhat.com/errata/RHSA-2026:51022
- https://access.redhat.com/errata/RHSA-2026:51422
- https://access.redhat.com/errata/RHSA-2026:53655
- https://access.redhat.com/errata/RHSA-2026:56431
- https://access.redhat.com/errata/RHSA-2026:59557
- https://access.redhat.com/errata/RHSA-2026:60023
- https://access.redhat.com/errata/RHSA-2026:61314
- https://access.redhat.com/errata/RHSA-2026:63046
- https://access.redhat.com/errata/RHSA-2026:66521
- https://access.redhat.com/security/cve/CVE-2026-35469
- https://bugzilla.redhat.com/show_bug.cgi?id=2457729
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35469.json
Current operational correlations are not mixed into this historical source record. Open latest evidence to discover current connections.