TI-2026-36511 CVE-2026-49329 · GHSA-2mr2-j2wm-v93x
Openshift/oauth-server: openshift/oauth-server: quadratic-time dos via accept-language…
Priority MEDIUM 40
A flaw was found in openshift/oauth-server.
RHSA-2026:74429
OpenShift Container Platform 4.22.17 bug fix and security update
Released 2026-10-06 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Container Platform 4.22 registry.redhat.io/openshift4/oc-mirror-plugin-rhel9, registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9, registry.redhat.io/openshift4/ose-aws-cluster-api-controllers-rhel9 +15
Fixes 6 records
TI-2026-26186 CVE-2026-33814
Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net
Priority MEDIUM 40
When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.
TI-2026-47529 CVE-2026-67213 · GHSA-2v37-7h3g-55p8
nanoid before 5.1.6 Infinite Loop via Zero Size in customAlphabet and customRandom
Priority LOW 36
nanoid (Nano ID) before 5.1.6 contains an infinite loop in the customAlphabet and customRandom functions.
TI-2026-63813 CVE-2026-96577 · GHSA-gh86-jqm4-pwg7
Missing authentication in Red Hat OpenShift Container Platform 4.18
Priority LOW 30
A flaw was found in oc-mirror.
TI-2026-57692 CVE-2026-83589 · GHSA-8c7h-7vm9-jhj3
Oauth-proxy: open redirect via /\ and /\t bypass in post-login redirect
Priority LOW 27
A flaw was found in oauth-proxy.
TI-2026-21586 CVE-2026-27136 · GHSA-m9x8-m34x-fj9q
Invoking duplicate attributes can cause XSS in golang.org/x/net/html
Priority LOW 27
Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree.