Red Hat Security AdvisoryRHSA-2026:48699
OpenShift Container Platform 4.18.51 bug fix and security update
Released 2026-08-05 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.18 registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator, registry.redhat.io/openshift4/ose-console-rhel9, registry.redhat.io/openshift4/ose-hypershift-rhel9 +1
Fixes 6 records
Priority MEDIUM 50
A flaw was found in the Konnectivity proxy-server configuration for hosted control planes.
CVSS 3.1CRITICAL 9.4· Network · No auth · No interaction · EPSS 0.00918 · Published 2026-07-20 · Fixed in 1784905766, 1784945966 +13 CWE-306
Priority MEDIUM 49
gRPC-Go is the Go language implementation of gRPC.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01619 · Published 2026-03-20 · Partial fix · 1.79.3 CWE-285
Priority MEDIUM 48
The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names, and both paths flow into the same Function() constructor sink.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02808 · Published 2026-03-31 · Partial fix · 4.18.1, 4.18.0 CWE-94
Priority MEDIUM 43
shell-quote's `quote()` function did not validate object-token inputs against the operator model used by `parse()`.
CVSS 4.0CRITICAL 9.2· Network · No auth · No interaction · EPSS 0.00793 · Published 2026-05-22 · Partial fix · 1.8.4 CWE-77
Priority MEDIUM 40
Prometheus is an open-source monitoring system and time series database.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00813 · Published 2026-05-04 · Partial fix · 3.5.3, 3.11.3 +2 CWE-400
Priority LOW 31
follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows redirects.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00486 · Published 2026-04-21 · Partial fix · 1.16.0 CWE-200
THREATIST.IORead the docs