Red Hat Security Advisory

RHSA-2026:1042

cert-manager Operator for Red Hat OpenShift 1.18.1

Released 2026-01-22 · Red Hat rating Important · View on Red Hat →

Fixed in

Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9

TI-2026-17326 CVE-2026-21441 · GHSA-38jv-5279-wg99

MEDIUM 50

urllib3 is an HTTP client library for Python.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.02922 Published 2026-01-07 Partial fix · 2.6.3 CWE-409

TI-2025-40854 CVE-2025-66418 · GHSA-gm62-xv2j-4w53

MEDIUM 46

urllib3 is a user-friendly HTTP client library for Python.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00731 Published 2025-12-05 Partial fix · 2.6.0 CWE-770

TI-2025-40898 CVE-2025-66471 · GHSA-2xpw-w6gg-jr37

MEDIUM 40

urllib3 is a user-friendly HTTP client library for Python.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00731 Published 2025-12-05 Partial fix · 2.6.0 CWE-409

TI-2025-38129 CVE-2025-61727 · GHSA-5mh9-3jwc-rp59

LOW 35

An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00304 Published 2025-12-03 Partial fix · 1.24.11, 1.25.5 CWE-295

TI-2025-38131 CVE-2025-61729 · GHSA-7c64-f9jr-v9h2

LOW 33

Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0049 Published 2025-12-02 Partial fix · 1.24.11, 1.25.5 CWE-295