Red Hat Security Advisory

RHSA-2026:2368

Custom Metrics Autoscaler Operator for Red Hat OpenShift 2.18.1-2 Update

Released 2026-02-09 · Red Hat rating Important · View on Red Hat →

Fixed in

Custom Metric Autoscaler operator for Red Hat Openshift 2.18 registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-adapter-rhel9, registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-admission-webhooks-rhel9, registry.redhat.io/custom-metrics-autoscaler/custom-metrics-autoscaler-operator-bundle +2

TI-2025-42006 CVE-2025-68476 · GHSA-c4p6-qg4m-9jmr

MEDIUM 43

KEDA is a Kubernetes-based Event Driven Autoscaling component.

CVSS 4.0HIGH 8.2 Network High privileges No interaction EPSS 0.00626 Published 2025-12-22 Partial fix · 2.17.3, 2.18.3 CWE-22

TI-2025-41736 CVE-2025-68156 · GHSA-cfpf-hrx2-8rv6

LOW 39

Expr is an expression language and expression evaluation for Go.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00418 Published 2025-12-16 Partial fix · 1.17.7 CWE-770