Red Hat Security Advisory

RHSA-2026:48670

OpenShift Container Platform 4.21.27 bug fix and security update

Released 2026-08-04 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.21 registry.redhat.io/openshift4/ose-hypershift-rhel9, registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9

TI-2026-30422 CVE-2026-42043 · GHSA-pmwg-cvhr-8vh7

HIGH 82

Axios is a promise based HTTP client for the browser and Node.js.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00711 Published 2026-04-24 Partial fix · 1.15.1, 0.31.1 CWE-183

TI-2026-30418 CVE-2026-42039 · GHSA-62hf-57xw-28j9

HIGH 70

Axios is a promise based HTTP client for the browser and Node.js.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00772 Published 2026-04-24 Partial fix · 1.15.1, 0.31.1 CWE-674

TI-2026-30412 CVE-2026-42033 · GHSA-pf86-5x62-jrwf

HIGH 68

Axios is a promise based HTTP client for the browser and Node.js.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00867 Published 2026-04-24 Partial fix · 1.15.1, 0.31.1 CWE-1321

TI-2026-36811 CVE-2026-49978 · GHSA-rp9w-3fw7-7cwq

MEDIUM 61

DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG.

CVSS 4.0MEDIUM 6.3 Network No auth User interaction EPSS 0.00404 Published 2026-07-14 Partial fix · 3.4.6, 3.4.7 CWE-79

TI-2026-13581 CVE-2026-16242 · GHSA-43hh-68v6-mf36

MEDIUM 50

A flaw was found in the Konnectivity proxy-server configuration for hosted control planes.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.00918 Published 2026-07-20 Fixed in 1784905766, 1784945966 +13 CWE-306