Red Hat Security Advisory

RHSA-2026:1166

cert-manager Operator for Red Hat OpenShift 1.18.1

Released 2026-01-26 · Red Hat rating Important · View on Red Hat →

Fixed in

Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9

TI-2026-17326 CVE-2026-21441 · GHSA-38jv-5279-wg99

MEDIUM 50

urllib3 is an HTTP client library for Python.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.02922 Published 2026-01-07 Partial fix · 2.6.3 CWE-409

TI-2025-40898 CVE-2025-66471 · GHSA-2xpw-w6gg-jr37

MEDIUM 40

urllib3 is a user-friendly HTTP client library for Python.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00731 Published 2025-12-05 Partial fix · 2.6.0 CWE-409

TI-2025-38131 CVE-2025-61729 · GHSA-7c64-f9jr-v9h2

LOW 33

Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0049 Published 2025-12-02 Partial fix · 1.24.11, 1.25.5 CWE-295