Red Hat Security Advisory

RHSA-2025:19058

OpenShift Container Platform 4.14.58 bug fix and security update

Released 2025-10-30 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.14 registry.redhat.io/openshift4/ose-console

Fixes 2 records

TI-2024-32607 CVE-2024-48910 · GHSA-p3vf-v8qc-cwcr

DOMPurify vulnerable to tampering by prototype polution

MEDIUM 51

DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01151 Published 2024-10-31 Partial fix · 2.4.2 CWE-1321

TI-2024-06062 CVE-2024-6538 · GHSA-v3w7-g6p2-mpx7

Openshift-console: openshift console: server-side request forgery

LOW 31

A flaw was found in OpenShift Console.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00584 Published 2024-11-25 Fixed in 6.0.6, v4.16.0-202506020836.p0.g94ae640.assembly.stream.el9 +4 CWE-918