Red Hat Security Advisory

RHSA-2026:74430

OpenShift Container Platform 4.22.17 security and extras update

Released 2026-10-06 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.22 registry.redhat.io/openshift4/kube-compare-artifacts-rhel9, registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9, registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9

TI-2026-58035 CVE-2026-84445 · GHSA-2v4p-qf9q-27wj

MEDIUM 45

gRPC-Go is the Go language implementation of gRPC.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00641 Published 2026-09-14 Partial fix · 1.82.2, 1.83.2 +2 CWE-129

TI-2026-59480 CVE-2026-87114 · GHSA-c73r-9gcf-qjwr

LOW 33

A flaw was found in kube-compare.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00363 Published 2026-09-28 Partial fix · 1790632105, 1790707563 +2 CWE-829

TI-2026-21586 CVE-2026-27136 · GHSA-m9x8-m34x-fj9q

LOW 27

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00223 Published 2026-05-22 Partial fix · 0.55.0 CWE-1021