Red Hat Security Advisory

RHSA-2026:68543

OpenShift Container Platform 4.20.39 security and extras update

Released 2026-09-22 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.20 registry.redhat.io/openshift4/nmstate-console-plugin-rhel9

TI-2026-58005 CVE-2026-84394 · GHSA-58mr-gqgx-xq4g

LOW 39

fast-uri accepts a host that contains an unbalanced or misplaced authority bracket without reporting an error.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0038 Published 2026-09-02 Partial fix · 2.4.6, 3.1.7 +1 CWE-436

TI-2026-57933 CVE-2026-84292 · GHSA-qw65-cvwx-89v3

LOW 38

fast-uri serializes the port component of a URI without validating it.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00239 Published 2026-09-02 Partial fix · 2.4.6, 3.1.7 +1 CWE-116