Red Hat Security Advisory

RHSA-2026:90337

Red Hat OpenShift GitOps v1.21.6 security update

Released 2026-10-26 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift GitOps 1.21 registry.redhat.io/openshift-gitops-1/argocd-rhel9, registry.redhat.io/openshift-gitops-1/gitops-rhel9, registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator

TI-2026-57986 CVE-2026-84375 · GHSA-2883-xcg3-v3hh

MEDIUM 40

js-yaml is a JavaScript YAML parser and dumper.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00541 Published 2026-09-01 Partial fix · 3.15.2, 4.3.2 +1 CWE-400

TI-2026-50128 CVE-2026-71556 · GHSA-hc8v-wwc9-vgxm

LOW 31

go-git is an extensible git implementation library written in pure Go.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00357 Published 2026-08-07 Partial fix · 5.19.2, 6.0.0-alpha.5 CWE-59