TI-2026-48541 CVE-2026-69192 · GHSA-mwp4-54f8-5fhr
Improper input validation in beaugunderson ip-address
Priority HIGH 75
ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript.
RHSA-2026:63096
OpenShift Container Platform 4.22.13 bug fix and security update
Released 2026-09-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.22 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/aws-node-termination-handler-rhel9 +47
Fixes 6 records
TI-2026-39172 CVE-2026-54272 · GHSA-22jq-vg5j-6vgg
ip-address: Misclassification of IPv4-mapped/NAT64 IPv6 addresses can bypass SSRF and trust-boundary checks
Priority HIGH 70
ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript.
TI-2026-38567 CVE-2026-53488 · GHSA-xhf5-7wjv-pqxp
Improper input validation in backstage containerd
Priority MEDIUM 42
containerd is an open-source container runtime.
TI-2026-26186 CVE-2026-33814
Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net
Priority MEDIUM 40
When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.
TI-2026-28707 CVE-2026-39825 · GHSA-h74g-238j-357m
ReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputil
Priority LOW 30
ReverseProxy can forward queries containing parameters not visible to Rewrite functions.
TI-2026-21586 CVE-2026-27136 · GHSA-m9x8-m34x-fj9q
Invoking duplicate attributes can cause XSS in golang.org/x/net/html
Priority LOW 27
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree.