Red Hat Security Advisory

RHSA-2026:51007

OpenShift Container Platform 4.19.42 bug fix and security update

Released 2026-08-12 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.19 registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9, registry.redhat.io/openshift4/ose-oauth-proxy-rhel9, registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9

TI-2026-36811 CVE-2026-49978 · GHSA-rp9w-3fw7-7cwq

MEDIUM 61

DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG.

CVSS 4.0MEDIUM 6.3 Network No auth User interaction EPSS 0.00404 Published 2026-07-14 Partial fix · 3.4.6, 3.4.7 CWE-79

TI-2026-27599 CVE-2026-35469 · GHSA-pc3f-x583-g7j2

MEDIUM 45

spdystream is a Go library for multiplexing streams over SPDY connections.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00656 Published 2026-04-16 Partial fix · 0.5.1 CWE-770

TI-2026-36513 CVE-2026-49332 · GHSA-f2m2-cc3f-h4j2

LOW 37

A flaw was found in openshift/oauth-proxy.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00531 Published 2026-07-28 Fixed in 1786458704, 1786477436 +9 CWE-436