Red Hat Security AdvisoryRHSA-2026:44239
OpenShift Container Platform 4.22.7 security and extras update
Released 2026-07-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.22 registry.redhat.io/openshift4/nmstate-console-plugin-rhel9, registry.redhat.io/openshift4/ose-ptp-rhel9-operator
Fixes 4 records
Priority MEDIUM 40
fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTTP-family URLs.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00692 · Published 2026-06-29 · Partial fix · 4.0.1, 3.1.3 +1 CWE-436
Priority MEDIUM 40
brace-expansion through 5.0.6 is vulnerable to denial of service.
CVSS 4.0HIGH 7.7· Network · No auth · No interaction · EPSS 0.00364 · Published 2026-06-30 · Partial fix · 5.0.7, 1.1.16 +1 CWE-400
Priority LOW 27
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00223 · Published 2026-05-22 · Partial fix · 0.55.0 CWE-1021
Priority LOW 27
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00223 · Published 2026-05-22 · Partial fix · 0.55.0 CWE-1021
THREATIST.IORead the docs