TI-2026-53121 CVE-2026-75885 · GHSA-hm52-6738-r26p
Openshift/console: openshift/console: unauthenticated ssrf and resource exhaustion via devfile parser endpoint
Priority MEDIUM 47
A flaw was found in the OpenShift console.
RHSA-2026:71447
OpenShift Container Platform 4.19.49 bug fix and security update
Released 2026-09-30 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.19 registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9, registry.redhat.io/openshift4/ose-aws-ebs-csi-driver-rhel9-operator, registry.redhat.io/openshift4/ose-azure-disk-csi-driver-rhel9-operator +8
Fixes 6 records
TI-2026-39884 CVE-2026-55204 · GHSA-4vj2-5mvx-3vcc
HAProxy - NULL Pointer Dereference in hpack_dht_insert Function
Priority MEDIUM 44
HAProxy through 3.4.0, fixed in commit 9a6d1fe, contains a null pointer dereference vulnerability in hpack_dht_insert() within src/hpack-tbl.c that fails to validate the return value of hpack_dht_defrag() when the memory…
TI-2026-26186 CVE-2026-33814
Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net
Priority MEDIUM 40
When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.
TI-2026-53123 CVE-2026-75887 · GHSA-v74g-7mx6-787p
Openshift/console: openshift/console: unauthenticated path traversal in i18n locale handler
Priority LOW 39
A flaw was found in the OpenShift console.
TI-2026-30481 CVE-2026-42151 · GHSA-wg65-39gg-5wfj
Prometheus Azure AD remote write OAuth client secret exposed via config API
Priority LOW 39
Prometheus is an open-source monitoring system and time series database.
TI-2026-53122 CVE-2026-75886 · GHSA-f8rq-4f8p-cmww
Openshift/console: openshift/console: unauthenticated reverse proxy to in-cluster…
Priority LOW 38
A flaw was found in openshift/console.