Read the docs
TI-2025-40412 Aliases CVE-2025-65637GHSA-4f99-4q7p-p3gh

A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using…

Priority LOW 34CWE-400Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Partial Red Hat: 23 fixed, 28 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-400.

Summary

A denial-of-service vulnerability exists in github.com/sirupsen/logrus when using Entry.Writer() to log a single-line payload larger than 64KB without newline characters. Due to limitations in the internal bufio.Scanner, the read fails with "token too long" and the writer pipe is closed, leaving Writer() unusable and causing application unavailability (DoS). This affects versions < 1.8.3, 1.9.0, and 1.9.2. The issue is fixed in 1.8.3, 1.9.1, and 1.9.3+, where the input is chunked and the writer continues to function even if an error is logged.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00675 52nd percentileScored 2026-11-07
Public exploit Yes 3 exploit referencesTagged by NVD
Fix Partial github.com/sirupsen/logrus (Go): 1.8.3, 1.9.1, 1.9.3Red Hat: 84 advisoriesRed Hat: 23 fixed, 28 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
—github.com/sirupsen/logrus (Go)before 1.8.31.8.3Patch availableGHSA-4f99-4q7p-p3gh
—github.com/sirupsen/logrus (Go)1.9.0 to before 1.9.11.9.1Patch availableGHSA-4f99-4q7p-p3gh
—github.com/sirupsen/logrus (Go)1.9.2 to before 1.9.31.9.3Patch availableGHSA-4f99-4q7p-p3gh
  • — Vendor— Affected all versions Fixed in — No fix listed CNA
  • github.com/sirupsen/logrus (Go) Vendor— Affected before 1.8.3 Fixed in 1.8.3 Patch available GHSA-4f99-4q7p-p3gh
  • github.com/sirupsen/logrus (Go) Vendor— Affected 1.9.0 to before 1.9.1 Fixed in 1.9.1 Patch available GHSA-4f99-4q7p-p3gh
  • github.com/sirupsen/logrus (Go) Vendor— Affected 1.9.2 to before 1.9.3 Fixed in 1.9.3 Patch available GHSA-4f99-4q7p-p3gh

CPE configurations NVD · 3

CPEVersionsRoleVendor
cpe:2.3:a:turbopuffer:logrus:*:*:*:*:*:go:*:*before 1.8.3VulnerableTurbopuffer
cpe:2.3:a:turbopuffer:logrus:1.9.0:*:*:*:*:go:*:*1.9.0VulnerableTurbopuffer
cpe:2.3:a:turbopuffer:logrus:1.9.2:*:*:*:*:go:*:*1.9.2VulnerableTurbopuffer
  • cpe:2.3:a:turbopuffer:logrus:*:*:*:*:*:go:*:* Versions before 1.8.3 Vulnerable ·Turbopuffer
  • cpe:2.3:a:turbopuffer:logrus:1.9.0:*:*:*:*:go:*:* Versions 1.9.0 Vulnerable ·Turbopuffer
  • cpe:2.3:a:turbopuffer:logrus:1.9.2:*:*:*:*:go:*:* Versions 1.9.2 Vulnerable ·Turbopuffer

Remediation

  • Fix · GHSA-4f99-4q7p-p3gh github.com/sirupsen/logrus (Go) Fixed in 1.8.3 Advisory →
  • Fix · GHSA-4f99-4q7p-p3gh github.com/sirupsen/logrus (Go) Fixed in 1.9.1 Advisory →
  • Fix · GHSA-4f99-4q7p-p3gh github.com/sirupsen/logrus (Go) Fixed in 1.9.3 Advisory →

Red Hat 84 advisories

  • RHSA-2026:82813 Released 2026-10-22 · Red Hat rating Important
    OpenShift Container Platform 4.15.70 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 registry.redhat.io/openshift4/kube-metrics-server-rhel8, registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9, registry.redhat.io/openshift4/ose-alibaba-cloud-controller-manager-rhel9 +23
  • RHSA-2026:17598 Released 2026-05-20 · Red Hat rating Important
    OpenShift Container Platform 4.17.54 bug fix and security update
    • Red Hat OpenShift Container Platform 4.17 registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/cloud-network-config-controller-rhel9 +47
  • RHSA-2026:14774 Released 2026-05-13 · Red Hat rating Important
    OpenShift Container Platform 4.15.64 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 registry.redhat.io/openshift4/cloud-network-config-controller-rhel8, registry.redhat.io/openshift4/egress-router-cni-rhel8, registry.redhat.io/openshift4/kube-metrics-server-rhel8 +47
Show 81 more Red Hat advisories
  • RHSA-2026:15941 Released 2026-05-11 · Red Hat rating Moderate
    skopeo security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) skopeo-2:1.8.0-4.1.el9_0.3, skopeo-tests-2:1.8.0-4.1.el9_0.3
  • RHSA-2026:15940 Released 2026-05-11 · Red Hat rating Moderate
    oci-seccomp-bpf-hook security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) oci-seccomp-bpf-hook-1.2.10-1.el9_0
  • RHSA-2026:12273 Released 2026-05-08 · Red Hat rating Moderate
    OpenShift Container Platform 4.12.88 packages and security update
    • Red Hat OpenShift Container Platform 4.12 openshift-4.12.0-202604271501.p2.gedc7ba9.assembly.stream.el8, openshift-4.12.0-202604271501.p2.gedc7ba9.assembly.stream.el9, openshift-hyperkube-4.12.0-202604271501.p2.gedc7ba9.assembly.stream.el8 +1
  • RHSA-2026:12282 Released 2026-05-06 · Red Hat rating Important
    OpenShift Container Platform 4.12.88 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 registry.redhat.io/openshift4/cloud-network-config-controller-rhel8, registry.redhat.io/openshift4/egress-router-cni-rhel8, registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8 +47
  • RHSA-2026:13971 Released 2026-05-06 · Red Hat rating Moderate
    skopeo security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) skopeo-2:1.11.4-0.1.el9_2.5, skopeo-tests-2:1.11.4-0.1.el9_2.5
  • RHSA-2026:11804 Released 2026-04-29 · Red Hat rating Moderate
    oci-seccomp-bpf-hook security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) oci-seccomp-bpf-hook-1.2.10-1.el9_2
  • RHSA-2026:7885 Released 2026-04-29 · Red Hat rating Moderate
    Red Hat OpenStack Services on OpenShift 18.0.18 (golang-github-openstack-k8s-operators-os-diff) security update
    • 9Base-RHOSO-TOOLS-18 golang-github-openstack-k8s-operators-os-diff-0.1.1-18.0.20260225161428.32d52e7.el9ost
    • Red Hat OpenStack Services on OpenShift 18.0 golang-github-openstack-k8s-operators-os-diff-0.1.1-18.0.20260225161428.32d52e7.el9ost
  • RHSA-2026:10703 Released 2026-04-27 · Red Hat rating Important
    container-tools:rhel8 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8, buildah-1:1.26.10-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8, buildah-1:1.26.10-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 +47
    • Red Hat Enterprise Linux AppStream E4S (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.aarch64::container-tools:rhel8, aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.ppc64le::container-tools:rhel8, aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.s390x::container-tools:rhel8 +47
    • Red Hat Enterprise Linux AppStream TUS (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8, buildah-1:1.26.10-1.module+el8.6.0+24209+25a14987.src::container-tools:rhel8, buildah-1:1.26.10-1.module+el8.6.0+24209+25a14987.x86_64::container-tools:rhel8 +47
  • RHSA-2026:7238 Released 2026-04-16 · Red Hat rating Moderate
    OpenShift Container Platform 4.13.65 packages and security update
    • Red Hat OpenShift Container Platform 4.13 openshift-4.13.0-202603240119.p2.g7aa9360.assembly.stream.el8, openshift-4.13.0-202603240119.p2.g7aa9360.assembly.stream.el9, openshift-hyperkube-4.13.0-202603240119.p2.g7aa9360.assembly.stream.el8 +1
  • RHSA-2026:7252 Released 2026-04-16 · Red Hat rating Moderate
    OpenShift Container Platform 4.13.65 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 registry.redhat.io/openshift4/ose-cluster-etcd-rhel8-operator, registry.redhat.io/openshift4/ose-cluster-image-registry-operator, registry.redhat.io/openshift4/ose-cluster-kube-apiserver-operator +7
  • RHSA-2026:7253 Released 2026-04-16 · Red Hat rating Moderate
    OpenShift Container Platform 4.13.65 security and extras update
    • Red Hat OpenShift Container Platform 4.13 registry.redhat.io/openshift4/ose-cloud-event-proxy, registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8
  • RHSA-2026:8325 Released 2026-04-15 · Red Hat rating Important
    buildah, crun, podman, runc, and skopeo security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) buildah-1:1.26.9-1.el9_0.3, buildah-tests-1:1.26.9-1.el9_0.3, podman-2:4.2.0-6.el9_0.6 +9
  • RHSA-2026:6493 Released 2026-04-09 · Red Hat rating Moderate
    OpenShift Container Platform 4.12.87 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 registry.redhat.io/openshift4/ose-cluster-image-registry-operator, registry.redhat.io/openshift4/ose-cluster-kube-apiserver-operator, registry.redhat.io/openshift4/ose-cluster-openshift-apiserver-operator +4
  • RHSA-2026:6911 Released 2026-04-07 · Red Hat rating Moderate
    OpenShift Container Platform 4.12 ztp-site-generate container
    • Red Hat OpenShift Container Platform 4.12 registry.redhat.io/openshift4/ztp-site-generate-rhel8
  • RHSA-2026:5907 Released 2026-04-01 · Red Hat rating Important
    OpenShift Container Platform 4.17.52 bug fix and security update
    • Red Hat OpenShift Container Platform 4.17 registry.redhat.io/openshift4/ose-cluster-kube-controller-manager-rhel9-operator, registry.redhat.io/openshift4/ose-ironic-rhel9, registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9
  • RHSA-2026:6191 Released 2026-03-30 · Red Hat rating Moderate
    container-tools:rhel8 security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.ppc64le::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.src::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.x86_64::container-tools:rhel8 +47
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.src::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.x86_64::container-tools:rhel8, buildah-1:1.29.7-1.module+el8.8.0+24026+ca15dd94.src::container-tools:rhel8 +47
  • RHSA-2026:5107 Released 2026-03-26 · Red Hat rating Moderate
    OpenShift Container Platform 4.14.63 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 registry.redhat.io/openshift4/cloud-network-config-controller-rhel8, registry.redhat.io/openshift4/egress-router-cni-rhel8, registry.redhat.io/openshift4/kubevirt-csi-driver-rhel8 +47
  • RHSA-2026:5108 Released 2026-03-26 · Red Hat rating Moderate
    OpenShift Container Platform 4.14.63 security and extras update
    • Red Hat OpenShift Container Platform 4.14 registry.redhat.io/openshift4/cloud-event-proxy-rhel8, registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel8
  • RHSA-2026:5133 Released 2026-03-25 · Red Hat rating Important
    OpenShift Container Platform 4.18.36 bug fix and security update
    • Red Hat OpenShift Container Platform 4.18 registry.redhat.io/openshift4/ose-docker-registry-rhel9, registry.redhat.io/openshift4/ose-ironic-rhel9
  • RHSA-2026:4580 Released 2026-03-19 · Red Hat rating Moderate
    Red Hat build of MicroShift 4.16.58 security update
    • Red Hat OpenShift Container Platform 4.16 microshift-4.16.58-202603160404.p0.gb9661ec.assembly.4.16.58.el9, microshift-greenboot-4.16.58-202603160404.p0.gb9661ec.assembly.4.16.58.el9, microshift-multus-4.16.58-202603160404.p0.gb9661ec.assembly.4.16.58.el9 +6
  • RHSA-2026:4482 Released 2026-03-19 · Red Hat rating Moderate
    OpenShift Container Platform 4.16.58 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/cloud-network-config-controller-rhel9 +47
  • RHSA-2026:4483 Released 2026-03-19 · Red Hat rating Moderate
    OpenShift Container Platform 4.16.58 security and extras update
    • Red Hat OpenShift Container Platform 4.16 registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9, registry.redhat.io/openshift4/ose-ptp-rhel9
  • RHSA-2026:4418 Released 2026-03-19 · Red Hat rating Moderate
    OpenShift Container Platform 4.15.62 packages and security update
    • Red Hat OpenShift Container Platform 4.15 cri-o-1.28.11-13.rhaos4.15.gitf722b2f.el9, openshift-4.15.0-202602130120.p2.g5cb2ef4.assembly.stream.el8, openshift-4.15.0-202602130120.p2.g5cb2ef4.assembly.stream.el9 +19
  • RHSA-2026:4423 Released 2026-03-19 · Red Hat rating Important
    OpenShift Container Platform 4.15.62 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 registry.redhat.io/openshift4/cloud-network-config-controller-rhel8, registry.redhat.io/openshift4/egress-router-cni-rhel8, registry.redhat.io/openshift4/kube-metrics-server-rhel8 +47
  • RHSA-2026:4424 Released 2026-03-19 · Red Hat rating Moderate
    OpenShift Container Platform 4.15.62 security and extras update
    • Red Hat OpenShift Container Platform 4.15 registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator, registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9, registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8 +4
  • RHSA-2026:4510 Released 2026-03-19 · Red Hat rating Important
    OpenShift Container Platform 4.17.51 bug fix and security update
    • Red Hat OpenShift Container Platform 4.17 registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/cloud-network-config-controller-rhel9 +47
  • RHSA-2026:4434 Released 2026-03-18 · Red Hat rating Important
    OpenShift Container Platform 4.19.26 bug fix and security update
    • Red Hat OpenShift Container Platform 4.19 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9 +47
  • RHSA-2026:4693 Released 2026-03-17 · Red Hat rating Important
    container-tools:rhel8 security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.ppc64le::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.src::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.x86_64::container-tools:rhel8 +47
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.src::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+23884+2031fc78.x86_64::container-tools:rhel8, buildah-1:1.29.7-1.module+el8.8.0+24026+ca15dd94.src::container-tools:rhel8 +47
  • RHSA-2026:4533 Released 2026-03-12 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) podman-2:4.4.1-22.el9_2.5, podman-docker-2:4.4.1-22.el9_2.5, podman-gvproxy-2:4.4.1-22.el9_2.5 +3
  • RHSA-2026:4532 Released 2026-03-12 · Red Hat rating Important
    buildah security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) buildah-1:1.29.5-1.el9_2.2, buildah-tests-1:1.29.5-1.el9_2.2
  • RHSA-2026:4531 Released 2026-03-12 · Red Hat rating Important
    runc security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) runc-4:1.2.9-1.el9_2.1
  • RHSA-2026:3870 Released 2026-03-12 · Red Hat rating Important
    OpenShift Container Platform 4.12.86 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 registry.redhat.io/openshift4/ose-aws-ebs-csi-driver-rhel8-operator, registry.redhat.io/openshift4/ose-cluster-etcd-rhel8-operator, registry.redhat.io/openshift4/ose-cluster-kube-storage-version-migrator-rhel8-operator +11
  • RHSA-2026:3871 Released 2026-03-12 · Red Hat rating Moderate
    OpenShift Container Platform 4.12.86 security and extras update
    • Red Hat OpenShift Container Platform 4.12 registry.redhat.io/openshift4/cloud-event-proxy-rhel8, registry.redhat.io/openshift4/ose-ptp, registry.redhat.io/openshift4/ose-ptp-operator +1
  • RHSA-2026:3855 Released 2026-03-11 · Red Hat rating Important
    OpenShift Container Platform 4.20.16 bug fix and security update
    • Red Hat OpenShift Container Platform 4.20 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9 +47
  • RHSA-2026:3422 Released 2026-03-05 · Red Hat rating Important
    OpenShift Container Platform 4.13.64 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel8, registry.redhat.io/openshift4/ose-aws-ebs-csi-driver-rhel8-operator, registry.redhat.io/openshift4/ose-azure-file-csi-driver-operator-rhel8 +13
  • RHSA-2026:3423 Released 2026-03-05 · Red Hat rating Moderate
    OpenShift Container Platform 4.13.64 security and extras update
    • Red Hat OpenShift Container Platform 4.13 registry.redhat.io/openshift4/ose-local-storage-rhel9-operator, registry.redhat.io/openshift4/ose-ptp, registry.redhat.io/openshift4/ose-ptp-operator +1
  • RHSA-2026:3418 Released 2026-03-04 · Red Hat rating Moderate
    OpenShift Container Platform 4.17.50 bug fix and security update
    • Red Hat OpenShift Container Platform 4.17 registry.redhat.io/openshift4/container-networking-plugins-microshift-rhel9, registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9, registry.redhat.io/openshift4/ose-cluster-authentication-rhel9-operator +5
  • RHSA-2026:3419 Released 2026-03-04 · Red Hat rating Moderate
    OpenShift Container Platform 4.17.50 security and extras update
    • Red Hat OpenShift Container Platform 4.17 registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9, registry.redhat.io/openshift4/ose-ptp-rhel9
  • RHSA-2026:2973 Released 2026-02-26 · Red Hat rating Moderate
    OpenShift Container Platform 4.14.62 packages and security update
    • Red Hat OpenShift Container Platform 4.14 openshift-4.14.0-202602170118.p2.ga3faddd.assembly.stream.el8, openshift-4.14.0-202602170118.p2.ga3faddd.assembly.stream.el9, openshift-hyperkube-4.14.0-202602170118.p2.ga3faddd.assembly.stream.el8 +1
  • RHSA-2026:3428 Released 2026-02-26 · Red Hat rating Important
    container-tools:rhel8 security update
    • Red Hat Enterprise Linux AppStream (v. 8) aardvark-dns-2:1.10.1-2.module+el8.10.0+23963+b64d8032.aarch64::container-tools:rhel8, aardvark-dns-2:1.10.1-2.module+el8.10.0+23963+b64d8032.ppc64le::container-tools:rhel8, aardvark-dns-2:1.10.1-2.module+el8.10.0+23963+b64d8032.s390x::container-tools:rhel8 +47
  • RHSA-2026:2990 Released 2026-02-26 · Red Hat rating Important
    OpenShift Container Platform 4.14.62 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 registry.redhat.io/openshift4/ose-aws-ebs-csi-driver-rhel8-operator, registry.redhat.io/openshift4/ose-azure-file-csi-driver-operator-rhel8, registry.redhat.io/openshift4/ose-cluster-etcd-rhel8-operator +12
  • RHSA-2026:2991 Released 2026-02-26 · Red Hat rating Moderate
    OpenShift Container Platform 4.14.62 security and extras update
    • Red Hat OpenShift Container Platform 4.14 registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel8-operator, registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel8, registry.redhat.io/openshift4/ose-ptp-operator +2
  • RHSA-2026:2977 Released 2026-02-25 · Red Hat rating Moderate
    OpenShift Container Platform 4.18.34 bug fix and security update
    • Red Hat OpenShift Container Platform 4.18 registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9, registry.redhat.io/openshift4/ose-cluster-config-rhel9-operator, registry.redhat.io/openshift4/ose-gcp-pd-csi-driver-rhel9 +1
  • RHSA-2026:2978 Released 2026-02-25 · Red Hat rating Moderate
    OpenShift Container Platform 4.18.34 security and extras update
    • Red Hat OpenShift Container Platform 4.18 registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9
  • RHSA-2026:3099 Released 2026-02-23 · Red Hat rating Moderate
    OpenShift Container Platform 4.12.82 CNF vRAN extras topology aware lifecycle manager update
    • Red Hat OpenShift Container Platform 4.12 registry.redhat.io/openshift4/topology-aware-lifecycle-manager-rhel8-operator
  • RHSA-2026:2746 Released 2026-02-23 · Red Hat rating Moderate
    Red Hat build of MicroShift 4.17.49 security update
    • Red Hat OpenShift Container Platform 4.17 microshift-4.17.49-202602161401.p0.g708a69a.assembly.4.17.49.el9, microshift-greenboot-4.17.49-202602161401.p0.g708a69a.assembly.4.17.49.el9, microshift-low-latency-4.17.49-202602161401.p0.g708a69a.assembly.4.17.49.el9 +7
  • RHSA-2026:2670 Released 2026-02-18 · Red Hat rating Moderate
    OpenShift Container Platform 4.17.49 packages and security update
    • Red Hat OpenShift Container Platform 4.17 openshift-4.17.0-202602031716.p2.g4e295fa.assembly.stream.el8, openshift-4.17.0-202602031716.p2.g4e295fa.assembly.stream.el9, openshift-hyperkube-4.17.0-202602031716.p2.g4e295fa.assembly.stream.el8 +9
  • RHSA-2026:2658 Released 2026-02-18 · Red Hat rating Moderate
    OpenShift Container Platform 4.16.57 packages and security update
    • Red Hat OpenShift Container Platform 4.16 openshift-4.16.0-202602100409.p2.g41c4e9b.assembly.stream.el8, openshift-4.16.0-202602100409.p2.g41c4e9b.assembly.stream.el9, openshift-hyperkube-4.16.0-202602100409.p2.g41c4e9b.assembly.stream.el8 +9
  • RHSA-2026:2661 Released 2026-02-18 · Red Hat rating Important
    OpenShift Container Platform 4.16.57 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 registry.redhat.io/openshift4/ose-console-rhel9, registry.redhat.io/openshift4/ose-hyperkube-rhel9, registry.redhat.io/openshift4/ose-ironic-agent-rhel9 +2
  • RHSA-2026:2662 Released 2026-02-18 · Red Hat rating Moderate
    OpenShift Container Platform 4.16.57 security and extras update
    • Red Hat OpenShift Container Platform 4.16 registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9, registry.redhat.io/openshift4/ose-ptp-rhel9-operator, registry.redhat.io/openshift4/ptp-must-gather-rhel9
  • RHSA-2026:2672 Released 2026-02-18 · Red Hat rating Important
    OpenShift Container Platform 4.17.49 bug fix and security update
    • Red Hat OpenShift Container Platform 4.17 registry.redhat.io/openshift4/ose-cluster-config-rhel9-operator, registry.redhat.io/openshift4/ose-cluster-etcd-rhel9-operator, registry.redhat.io/openshift4/ose-cluster-kube-scheduler-rhel9-operator +6
  • RHSA-2026:2651 Released 2026-02-18 · Red Hat rating Important
    OpenShift Container Platform 4.19.24 bug fix and security update
    • Red Hat OpenShift Container Platform 4.19 registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9, registry.redhat.io/openshift4/ose-console-rhel9, registry.redhat.io/openshift4/ose-vmware-vsphere-csi-driver-rhel9 +1
  • RHSA-2026:2673 Released 2026-02-17 · Red Hat rating Moderate
    OpenShift Container Platform 4.17.49 security and extras update
    • Red Hat OpenShift Container Platform 4.17 registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9, registry.redhat.io/openshift4/ose-ptp-rhel9-operator, registry.redhat.io/openshift4/ptp-must-gather-rhel9
  • RHSA-2026:2652 Released 2026-02-17 · Red Hat rating Moderate
    OpenShift Container Platform 4.19.24 security and extras update
    • Red Hat OpenShift Container Platform 4.19 registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9, registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9
  • RHSA-2026:2687 Released 2026-02-16 · Red Hat rating Moderate
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) osbuild-composer-46.3-5.el8_6, osbuild-composer-core-46.3-5.el8_6, osbuild-composer-dnf-json-46.3-5.el8_6 +1
    • Red Hat Enterprise Linux AppStream E4S (v.8.6) osbuild-composer-46.3-5.el8_6, osbuild-composer-core-46.3-5.el8_6, osbuild-composer-dnf-json-46.3-5.el8_6 +1
    • Red Hat Enterprise Linux AppStream TUS (v.8.6) osbuild-composer-46.3-5.el8_6, osbuild-composer-core-46.3-5.el8_6, osbuild-composer-dnf-json-46.3-5.el8_6 +1
  • RHSA-2026:2688 Released 2026-02-16 · Red Hat rating Moderate
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) osbuild-composer-76.1-4.el9_2, osbuild-composer-core-76.1-4.el9_2, osbuild-composer-dnf-json-76.1-4.el9_2 +1
  • RHSA-2026:2685 Released 2026-02-12 · Red Hat rating Moderate
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) osbuild-composer-75-6.el8_8, osbuild-composer-core-75-6.el8_8, osbuild-composer-dnf-json-75-6.el8_8 +1
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) osbuild-composer-75-6.el8_8, osbuild-composer-core-75-6.el8_8, osbuild-composer-dnf-json-75-6.el8_8 +1
  • RHSA-2026:2686 Released 2026-02-12 · Red Hat rating Moderate
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) osbuild-composer-46.3-6.el9_0, osbuild-composer-core-46.3-6.el9_0, osbuild-composer-dnf-json-46.3-6.el9_0 +1
  • RHSA-2026:2065 Released 2026-02-12 · Red Hat rating Moderate
    OpenShift Container Platform 4.12.85 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel8, registry.redhat.io/openshift4/ose-agent-installer-csr-approver-rhel8, registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel8 +1
  • RHSA-2026:2066 Released 2026-02-12 · Red Hat rating Moderate
    OpenShift Container Platform 4.12.85 security and extras update
    • Red Hat OpenShift Container Platform 4.12 registry.redhat.io/openshift4/ose-local-storage-operator
  • RHSA-2026:2520 Released 2026-02-11 · Red Hat rating Moderate
    toolbox security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) toolbox-0.0.99.5.1-2.el9_4, toolbox-tests-0.0.99.5.1-2.el9_4
  • RHSA-2026:2519 Released 2026-02-11 · Red Hat rating Moderate
    toolbox security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) toolbox-0.0.99.4.1-1.el9_2, toolbox-tests-0.0.99.4.1-1.el9_2
  • RHSA-2026:2079 Released 2026-02-11 · Red Hat rating Moderate
    OpenShift Container Platform 4.18.33 security and extras update
    • Red Hat OpenShift Container Platform 4.18 registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9
  • RHSA-2026:2078 Released 2026-02-11 · Red Hat rating Important
    OpenShift Container Platform 4.18.33 bug fix and security update
    • Red Hat OpenShift Container Platform 4.18 registry.redhat.io/openshift4/ose-baremetal-installer-rhel9, registry.redhat.io/openshift4/ose-console-rhel9, registry.redhat.io/openshift4/ose-insights-rhel9-operator +2
  • RHSA-2026:2119 Released 2026-02-11 · Red Hat rating Important
    OpenShift Container Platform 4.20.14 bug fix and security update
    • Red Hat OpenShift Container Platform 4.20 registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9, registry.redhat.io/openshift4/ose-console-rhel9
  • RHSA-2026:2120 Released 2026-02-11 · Red Hat rating Moderate
    OpenShift Container Platform 4.20.14 security and extras update
    • Red Hat OpenShift Container Platform 4.20 registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9
  • RHSA-2026:2129 Released 2026-02-10 · Red Hat rating Important
    OpenShift Container Platform 4.21.1 bug fix and security update
    • Red Hat OpenShift Container Platform 4.21 registry.redhat.io/openshift4/ose-agent-installer-utils-rhel9, registry.redhat.io/openshift4/ose-console-rhel9, registry.redhat.io/openshift4/ose-ironic-rhel9 +2
  • RHSA-2026:2130 Released 2026-02-10 · Red Hat rating Moderate
    OpenShift Container Platform 4.21.1 security and extras update
    • Red Hat OpenShift Container Platform 4.21 registry.redhat.io/openshift4/ose-cloud-event-proxy-rhel9, registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9
  • RHSA-2026:2351 Released 2026-02-09 · Red Hat rating Moderate
    VolSync v0.13 security fixes and container updates
    • Red Hat Advanced Cluster Management for Kubernetes 2.14 registry.redhat.io/rhacm2/volsync-rhel9
  • RHSA-2026:1540 Released 2026-02-05 · Red Hat rating Important
    OpenShift Container Platform 4.15.61 packages and security update
    • Ironic content for Red Hat OpenShift Container Platform 4.15 python-eventlet-0.33.1-7.el9, python3-eventlet-0.33.1-7.el9
    • Red Hat OpenShift Container Platform 4.15 bpftool-7.0.0-284.155.1.el9_2, kernel-5.14.0-284.155.1.el9_2, kernel-64k-5.14.0-284.155.1.el9_2 +47
  • RHSA-2026:1549 Released 2026-02-05 · Red Hat rating Moderate
    OpenShift Container Platform 4.15.61 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 registry.redhat.io/openshift4/ose-alibaba-cloud-csi-driver-container-rhel9, registry.redhat.io/openshift4/ose-aws-ebs-csi-driver-rhel9-operator, registry.redhat.io/openshift4/ose-azure-file-csi-driver-operator-rhel8 +7
  • RHSA-2026:1552 Released 2026-02-04 · Red Hat rating Important
    OpenShift Container Platform 4.19.23 bug fix and security update
    • Red Hat OpenShift Container Platform 4.19 registry.redhat.io/openshift4/ose-baremetal-installer-rhel9, registry.redhat.io/openshift4/ose-gcp-pd-csi-driver-rhel9, registry.redhat.io/openshift4/ose-hypershift-rhel9 +3
  • RHSA-2026:1577 Released 2026-02-04 · Red Hat rating Moderate
    OpenShift Container Platform 4.17.48 bug fix and security update
    • Red Hat OpenShift Container Platform 4.17 registry.redhat.io/openshift4/ose-baremetal-installer-rhel9, registry.redhat.io/openshift4/ose-ironic-agent-rhel9, registry.redhat.io/openshift4/ose-ironic-rhel9 +1
  • RHSA-2026:1555 Released 2026-02-04 · Red Hat rating Moderate
    OpenShift Container Platform 4.20.13 bug fix and security update
    • Red Hat OpenShift Container Platform 4.20 registry.redhat.io/openshift4/ovirt-csi-driver-rhel9-operator
  • RHSA-2026:1556 Released 2026-02-04 · Red Hat rating Moderate
    OpenShift Container Platform 4.20.13 security and extras update
    • Red Hat OpenShift Container Platform 4.20 registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9
  • RHSA-2026:1062 Released 2026-02-03 · Red Hat rating Moderate
    OpenShift Container Platform 4.18.32 bug fix and security update
    • Red Hat OpenShift Container Platform 4.18 registry.redhat.io/openshift4/ose-ironic-agent-rhel9, registry.redhat.io/openshift4/ose-ironic-rhel9, registry.redhat.io/openshift4/ose-operator-marketplace-rhel9
  • RHSA-2026:1004 Released 2026-01-30 · Red Hat rating Moderate
    OpenShift Container Platform 4.14.61 security and extras update
    • Red Hat OpenShift Container Platform 4.14 registry.redhat.io/openshift4/ose-local-storage-operator
  • RHSA-2026:0715 Released 2026-01-22 · Red Hat rating Moderate
    OpenShift Container Platform 4.17.47 bug fix and security update
    • Red Hat OpenShift Container Platform 4.17 registry.redhat.io/openshift4/ose-baremetal-machine-controllers-rhel9, registry.redhat.io/openshift4/ose-image-customization-controller-rhel9
  • RHSA-2026:0327 Released 2026-01-15 · Red Hat rating Moderate
    OpenShift Container Platform 4.16.55 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 registry.redhat.io/openshift4/ose-image-customization-controller-rhel9
  • RHSA-2026:0338 Released 2026-01-14 · Red Hat rating Moderate
    OpenShift Container Platform 4.18.31 bug fix and security update
    • Red Hat OpenShift Container Platform 4.18 registry.redhat.io/openshift4/ose-image-customization-controller-rhel9
  • RHSA-2026:0425 Released 2026-01-12 · Red Hat rating Important
    runc security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) runc-4:1.2.9-1.el9_4

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Confidential Compute AttestationAffectedNo fix planned: Out of support scope
ExternalDNS OperatorAffectedNo fix planned: Out of support scope
Kube Descheduler OperatorAffectedNo fix yet
Logging Subsystem for Red Hat OpenShiftAffectedNo fix planned: Out of support scope
Logical Volume Manager StorageAffectedNo fix planned: Out of support scope
Migration Toolkit for Applications 7AffectedNo fix yet
Migration Toolkit for ContainersAffectedNo fix yet
Multicluster Engine for KubernetesAffectedNo fix yet
Node HealthCheck OperatorAffectedNo fix planned: Out of support scope
OpenShift API for Data ProtectionAffectedNo fix planned: Out of support scope
OpenShift Developer Tools and ServicesAffectedNo fix planned: Out of support scope
OpenShift PipelinesAffectedNo fix planned: Out of support scope
OpenShift Secondary Scheduler OperatorAffectedNo fix planned: Out of support scope
OpenShift Service Mesh 2AffectedNo fix planned: Out of support scope
Red Hat 3scale API Management Platform 2AffectedNo fix yet
Red Hat Advanced Cluster Management for Kubernetes 2AffectedNo fix yet
Red Hat Enterprise Linux 8AffectedNo fix yet
Red Hat Enterprise Linux 9AffectedNo fix yet
Red Hat OpenShift AI (RHOAI)AffectedNo fix planned: Out of support scope
Red Hat OpenShift Container Platform 4AffectedNo fix yet
Red Hat OpenShift GitOpsAffectedNo fix yet
Red Hat OpenShift Virtualization 4AffectedNo fix planned: Out of support scope
Red Hat OpenShift for Windows ContainersAffectedNo fix planned: Out of support scope
Red Hat Openshift Data Foundation 4AffectedNo fix planned: Out of support scope
Red Hat Quay 3AffectedNo fix planned: Out of support scope
Red Hat Web TerminalAffectedNo fix planned: Out of support scope
mirror registry for Red Hat OpenShiftAffectedNo fix planned: Will not fix
mirror registry for Red Hat OpenShift 2AffectedNo fix yet
9Base-RHOSO-TOOLS-18Fixed RHSA-2026:7885
Ironic content for Red Hat OpenShift Container Platform 4.15Fixed RHSA-2026:1540
Red Hat Advanced Cluster Management for Kubernetes 2.14Fixed RHSA-2026:2351
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2026:3428
Red Hat Enterprise Linux AppStream AUS (v.8.6)Fixed RHSA-2026:10703, RHSA-2026:2687
Red Hat Enterprise Linux AppStream E4S (v.8.6)Fixed RHSA-2026:10703, RHSA-2026:2687
Red Hat Enterprise Linux AppStream E4S (v.8.8)Fixed RHSA-2026:2685, RHSA-2026:4693, RHSA-2026:6191
Red Hat Enterprise Linux AppStream E4S (v.9.0)Fixed RHSA-2026:15940, RHSA-2026:15941, RHSA-2026:2686, RHSA-2026:8325
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2026:11804, RHSA-2026:13971, RHSA-2026:2519, RHSA-2026:2688, RHSA-2026:4531, RHSA-2026:4532, RHSA-2026:4533
Red Hat Enterprise Linux AppStream EUS (v.9.4)Fixed RHSA-2026:0425, RHSA-2026:2520
Red Hat Enterprise Linux AppStream TUS (v.8.6)Fixed RHSA-2026:10703, RHSA-2026:2687
Red Hat Enterprise Linux AppStream TUS (v.8.8)Fixed RHSA-2026:2685, RHSA-2026:4693, RHSA-2026:6191
Red Hat OpenShift Container Platform 4.12Fixed RHSA-2026:12273, RHSA-2026:12282, RHSA-2026:2065, RHSA-2026:2066, RHSA-2026:3099, RHSA-2026:3870, RHSA-2026:3871, RHSA-2026:6493, RHSA-2026:6911
Red Hat OpenShift Container Platform 4.13Fixed RHSA-2026:3422, RHSA-2026:3423, RHSA-2026:7238, RHSA-2026:7252, RHSA-2026:7253
Red Hat OpenShift Container Platform 4.14Fixed RHSA-2026:1004, RHSA-2026:2973, RHSA-2026:2990, RHSA-2026:2991, RHSA-2026:5107, RHSA-2026:5108
Red Hat OpenShift Container Platform 4.15Fixed RHSA-2026:14774, RHSA-2026:1540, RHSA-2026:1549, RHSA-2026:4418, RHSA-2026:4423, RHSA-2026:4424, RHSA-2026:82813
Red Hat OpenShift Container Platform 4.16Fixed RHSA-2026:0327, RHSA-2026:2658, RHSA-2026:2661, RHSA-2026:2662, RHSA-2026:4482, RHSA-2026:4483, RHSA-2026:4580
Red Hat OpenShift Container Platform 4.17Fixed RHSA-2026:0715, RHSA-2026:1577, RHSA-2026:17598, RHSA-2026:2670, RHSA-2026:2672, RHSA-2026:2673, RHSA-2026:2746, RHSA-2026:3418, RHSA-2026:3419, RHSA-2026:4510, RHSA-2026:5907
Red Hat OpenShift Container Platform 4.18Fixed RHSA-2026:0338, RHSA-2026:1062, RHSA-2026:2078, RHSA-2026:2079, RHSA-2026:2977, RHSA-2026:2978, RHSA-2026:5133
Red Hat OpenShift Container Platform 4.19Fixed RHSA-2026:1552, RHSA-2026:2651, RHSA-2026:2652, RHSA-2026:4434
Red Hat OpenShift Container Platform 4.20Fixed RHSA-2026:1555, RHSA-2026:1556, RHSA-2026:2119, RHSA-2026:2120, RHSA-2026:3855
Red Hat OpenShift Container Platform 4.21Fixed RHSA-2026:2129, RHSA-2026:2130
Red Hat OpenStack Services on OpenShift 18.0Fixed RHSA-2026:7885
Not affected: 90 products
  • Assisted Installer for Red Hat OpenShift Container Platform 2
  • Builds for Red Hat OpenShift
  • Compliance Operator
  • Confidential Compute Attestation
  • Cost Management Metrics Operator
  • Cryostat 4
  • Custom Metric Autoscaler operator for Red Hat Openshift
  • Deployment Validation Operator
  • Dynamic Accelerator Slicer Operator for Red Hat OpenShift
  • External Secrets Operator for Red Hat OpenShift
  • File Integrity Operator
  • Gatekeeper 3
  • Job Set Tech Preview
  • Kernel Module Management Operator for Red Hat Openshift
  • Leader Worker Set
  • Logging Subsystem for Red Hat OpenShift
  • Logical Volume Manager Storage
  • Machine Deletion Remediation Operator
  • Migration Toolkit for Applications 7
  • Migration Toolkit for Applications 8
  • Migration Toolkit for Containers
  • Migration Toolkit for Virtualization
  • Multiarch Tuning Operator
  • Multicluster Engine for Kubernetes
  • Multicluster Global Hub
  • Network Observability Operator
  • Node Maintenance Operator
  • OpenShift API for Data Protection
  • OpenShift Developer Tools and Services
  • OpenShift Lightspeed
  • OpenShift Pipelines
  • OpenShift Serverless
  • OpenShift Service Mesh 2
  • OpenShift Service Mesh 3
  • OpenShift Source-to-Image (S2I)
  • Power monitoring for Red Hat OpenShift
  • Red Hat 3scale API Management Platform 2
  • Red Hat AI Inference Server
  • Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Advanced Cluster Management for Kubernetes 2.14
  • Red Hat Advanced Cluster Security 4
  • Red Hat Ansible Automation Platform 2
  • Red Hat Build of Kueue
  • Red Hat Ceph Storage 5
  • Red Hat Ceph Storage 6
  • Red Hat Ceph Storage 7
  • Red Hat Ceph Storage 8
  • Red Hat Certification Program for Red Hat Enterprise Linux 9
  • Red Hat Connectivity Link 1
  • Red Hat Developer Hub 1
  • Red Hat Edge Manager preview
  • Red Hat Enterprise Linux 10
  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9
  • Red Hat Enterprise Linux AI (RHEL AI)
  • Red Hat Enterprise Linux AI (RHEL AI) 3
  • Red Hat Enterprise Linux AppStream E4S (v.9.0)
  • Red Hat OpenShift AI (RHOAI)
  • Red Hat OpenShift Cluster Manager CLI
  • Red Hat OpenShift Container Platform 4
  • Red Hat OpenShift Container Platform 4.12
  • Red Hat OpenShift Container Platform 4.13
  • Red Hat OpenShift Container Platform 4.14
  • Red Hat OpenShift Container Platform 4.15
  • Red Hat OpenShift Container Platform 4.16
  • Red Hat OpenShift Container Platform 4.17
  • Red Hat OpenShift Container Platform 4.18
  • Red Hat OpenShift Container Platform 4.19
  • Red Hat OpenShift Container Platform 4.20
  • Red Hat OpenShift Container Platform 4.21
  • Red Hat OpenShift Dev Spaces
  • Red Hat OpenShift GitOps
  • Red Hat OpenShift Virtualization 4
  • Red Hat OpenShift distributed tracing 3
  • Red Hat OpenShift on AWS
  • Red Hat OpenStack Platform 16.2
  • Red Hat OpenStack Platform 17.1
  • Red Hat OpenStack Platform 18.0
  • Red Hat Openshift Data Foundation 4
  • Red Hat Quay 3
  • Red Hat Satellite 6
  • Red Hat Trusted Artifact Signer
  • Red Hat Trusted Profile Analyzer
  • Red Hat Web Terminal
  • Security Profiles Operator
  • Service Telemetry Framework 1.5
  • Zero Trust Workload Identity Manager - Tech Preview
  • cert-manager Operator for Red Hat OpenShift
  • external secrets operator for Red Hat OpenShift - Tech Preview

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-65637
  2. 2026-10-03 Alias added: GHSA-4f99-4q7p-p3gh
  3. 2026-10-23 Fix available: RHSA-2026:82813 · Red Hat
  4. 2026-10-23 Affected versions changed · Red Hat
  5. 2026-10-27 Affected versions changed · Red Hat
  6. 2026-10-28 EPSS moved to the 50th–90th percentile
  7. 2026-10-31 Fix available: RHSA-2026:1552 · Red Hat
  8. 2026-11-06 Fix available: RHSA-2026:2746 · Red Hat
  9. 2026-11-06 Fix available: RHSA-2026:2662 · Red Hat
  10. 2026-11-06 Fix available: RHSA-2026:2673 · Red Hat
  11. 2026-11-06 Fix available: RHSA-2026:7252 · Red Hat

References

Exploit 3

Patch 1

Advisory 1

Other 5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences