Red Hat Security Advisory

RHSA-2026:94583

Important: Red Hat OpenShift GitOps v1.21.7 security update

Released 2026-11-03 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat OpenShift GitOps 1.21 registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9, registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9, registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9 +7

Fixes 3 records

TI-2026-53084 CVE-2026-75838 · GHSA-748c-f84h-hp2v

DOMPurify before 3.4.13 Cross-Site Scripting via IN_PLACE hook

MEDIUM 56

DOMPurify before 3.4.13 contains a cross-site scripting vulnerability in IN_PLACE sanitization where element-removal hooks fail to neutralize detached subtrees.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00394 Published 2026-08-18 Partial fix · 3.4.13 CWE-79

TI-2026-58035 CVE-2026-84445 · GHSA-2v4p-qf9q-27wj

gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers

MEDIUM 45

gRPC-Go is the Go language implementation of gRPC.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00641 Published 2026-09-14 Partial fix · 1.82.2, 1.83.2 +2 CWE-129

TI-2026-79000 CVE-2026-114406 · GHSA-jrx5-4fv3-4mcq

Red Hat system CA store trusts weak eMudhra intermediate certificates

LOW 32

The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak pr…

CVSS 3.1MEDIUM 6.8 Network No auth User interaction EPSS 0.0031 Published 2026-10-21 Partial fix · 2026.2.92_v9.0.319-100.3.el10_2, 2026.2.92_v9.0.319-100.3.el10_0 +138 CWE-295