TI-2026-27326 CVE-2026-35172 · GHSA-f2g3-hh2r-cwgc
Distribution has stale blob access resurrection via repo-scoped redis descriptor cache invalidation
Priority HIGH 72
Distribution is a toolkit to pack, ship, store, and deliver container content.
RHSA-2026:28893
OpenShift Container Platform 4.14.68 bug fix and security update
Released 2026-07-01 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.14 registry.redhat.io/openshift4/cloud-network-config-controller-rhel8, registry.redhat.io/openshift4/egress-router-cni-rhel8, registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8 +47
Fixes 8 records
TI-2025-41709 CVE-2025-68121 · GHSA-h355-32pf-p2xm
Unexpected session resumption in crypto/tls
Priority MEDIUM 51
During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have…
TI-2026-21593 CVE-2026-27143 · GHSA-cfp9-33rc-j74f
Missing bound checks can lead to memory corruption in safe Go in cmd/compile
Priority MEDIUM 50
Arithmetic over induction variables in loops were not correctly checked for underflow or overflow.
TI-2026-25614 CVE-2026-33186 · GHSA-p77j-4mvh-x3m3
gRPC-Go has an authorization bypass via missing leading slash in :path
Priority MEDIUM 49
gRPC-Go is the Go language implementation of gRPC.
TI-2026-23208 CVE-2026-29063 · GHSA-wf6x-7x77-mvgw
Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable
Priority MEDIUM 46
Immutable.js provides many Persistent Immutable data structures.
TI-2026-20764 CVE-2026-25679 · GHSA-j3gx-2473-5fp8
Incorrect parsing of IPv6 host literals in net/url
Priority MEDIUM 40
url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.
TI-2026-01466 CVE-2026-1784 · GHSA-qmrp-jx57-5mr7
Ose-cluster-ingress-operator: remote code execution through haproxy configuration injection
Priority LOW 39
The Route OpenShift resource allows to define routes to make pods reachable at a subdomain through HAProxy.
TI-2026-21594 CVE-2026-27144 · GHSA-cqrx-3m42-5p5w
Miscompilation allows memory corruption via CONVNOP-wrapped array copy in cmd/compile
Priority LOW 31
The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, potentially leading…