Skip to contentRed Hat Openshift Container Platform 4 vulnerabilities
- red hat openshift container platform 4.11, openshift container platform 4.12, openshift container platform 4.13 +2 more +4 moreOpenshift: modification of node role labelsCVE-2023-5408Fix available7.2 High
- red hat ironic content for red hat openshift container platform 4.12, openstack platform 17.1 for rhel 8, openstack platform 17.1 for rhel 9 +5 more +7 morePython-eventlet: patch regression for cve-2021-21419 in some red hat buildsCVE-2023-5625Fix available5.3 Medium
- openvswitch, fedora, red hat fast datapath for rhel 7 +12 more +14 moreOpenvswitch don't match packets on nd_target fieldCVE-2023-5366Fix available7.1 High
- red hat advanced cluster management for kubernetes 2, ansible automation platform 1.2, ansible tower 3 +4 more +6 moreOpenshift api admission checks does not enforce "custom-host" permissionsCVE-2022-32484.4 Medium
- red hat openshift container platform 4, redhat openshift container platform +1 moreContent spoofingCVE-2022-41454.3 Medium
- kubernetes kube-apiserver, red hat openshift container platform 4, openshift container platform 4.10 +5 more +7 moreKube-apiserver: privescCVE-2023-1260Fix available8.0 High
- ovn open virtual network, fedora, red hat fast datapath for rhel 7 +6 more +8 moreService monitor mac flow is not rate limitedCVE-2023-3153Fix available5.3 Medium
- kubernetes cri-o, redhat openshift container platform, red hat openshift container platform 3.11 +1 more +3 moreCri-o: security regression of cve-2022-27652CVE-2022-34664.8 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreSamba: check attribute access rights for ldap adds of computersCVE-2020-25720Fix available7.5 High
- redhat openshift container platform, red hat openshift serverless, openshift service mesh 2.2.x +13 more +15 moreOcp & fips modeCVE-2023-3089Fix available7.0 High
- kubernetes cri-o, fedoraproject extra packages for enterprise linux, fedora +7 more +9 moreCri-o: /etc/passwd tampering privescCVE-2022-4318Fix available7.8 High
- isaacs node-tar, tar, red hat confidential compute attestation +40 more +42 morenode-tar Vulnerable to Arbitrary File Overwrite and Symlink Poisoning via Insufficient Path SanitizationCVE-2026-23745Public exploitFix available8.2 High
- fast-uri, red hat cluster observability operator 1.5.0, confidential compute attestation +53 more +55 morefast-uri vulnerable to host confusion via percent-encoded authority delimitersCVE-2026-6322Fix available7.5 High
- fast-uri, red hat cluster observability operator 1.5.0, confidential compute attestation +32 more +34 morefast-uri vulnerable to path traversal via percent-encoded dot segmentsCVE-2026-6321Fix available7.5 High
- golang net, golang.org/x/net golang.org/x/net/idna, go standard library net/http +147 more +149 moreInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idnaCVE-2026-39821Fix available9.6 Critical
- openssl, red hat enterprise linux 10, enterprise linux 3 +11 more +13 moreOpenssl: openssl: signature forgery via improper pkcs-1 padding removal leading to certificate validation bypassCVE-2006-4339Fix available9.1 Critical