Read the docs
TI-2026-21586 Aliases CVE-2026-27136GHSA-m9x8-m34x-fj9q

Invoking duplicate attributes can cause XSS in golang.org/x/net/html

Priority LOW 27CWE-1021Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Spoofing
Confidentiality · integrity · availability
Low · Low · None
Fix status
Partial Red Hat: 77 fixed, 40 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-1021.

Summary

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00223 13th percentileScored 2026-11-07
Fix Partial golang.org/x/net/html (golang.org/x/net): 0.55.0Red Hat: 115 advisoriesRed Hat: 77 fixed, 40 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Go standard librarygolang.org/x/net/htmlbefore 0.55.00.55.0Patch availableCNA
  • golang.org/x/net/html VendorGo standard library Affected before 0.55.0 Fixed in 0.55.0 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:golang:net:*:*:*:*:*:go:*:*before 0.55.0VulnerableGo standard library

Remediation

  • Fix · CNA golang.org/x/net/html (golang.org/x/net) Fixed in 0.55.0

Red Hat 115 advisories

  • RHSA-2026:95612 Released 2026-11-05 · Red Hat rating Important
    OpenShift Compliance Operator bug fix and enhancement update
    • OpenShift Compliance Operator 1 registry.redhat.io/compliance/openshift-compliance-rhel8-operator
  • RHSA-2026:92510 Released 2026-10-29 · Red Hat rating Critical
    RHOAI 3.4.6 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-cli-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9 +47
  • RHSA-2026:91249 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.5.5 (Neuron)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-neuron-rhel9
Show 112 more Red Hat advisories
  • RHSA-2026:91248 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.4.6 (Neuron)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-neuron-rhel9
  • RHSA-2026:90493 Released 2026-10-26 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) osbuild-composer-46.3-11.el8_6, osbuild-composer-core-46.3-11.el8_6, osbuild-composer-dnf-json-46.3-11.el8_6 +1
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) osbuild-composer-46.3-11.el8_6, osbuild-composer-core-46.3-11.el8_6, osbuild-composer-dnf-json-46.3-11.el8_6 +1
  • RHSA-2026:90363 Released 2026-10-26 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) osbuild-composer-75-12.el8_8, osbuild-composer-core-75-12.el8_8, osbuild-composer-dnf-json-75-12.el8_8 +1
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) osbuild-composer-75-12.el8_8, osbuild-composer-core-75-12.el8_8, osbuild-composer-dnf-json-75-12.el8_8 +1
  • RHSA-2026:87410 Released 2026-10-21 · Red Hat rating Critical
    RHOAI 2.25.12 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-caikit-nlp-rhel9, registry.redhat.io/rhoai/odh-codeflare-operator-rhel9 +47
  • RHSA-2026:83702 Released 2026-10-20 · Red Hat rating Important
    OpenShift Container Platform 4.21.39 bug fix and security update
    • Red Hat OpenShift Container Platform 4.21 registry.redhat.io/openshift4/insights-runtime-extractor-rhel9, registry.redhat.io/openshift4/openshift-route-controller-manager-rhel9, registry.redhat.io/openshift4/ose-aws-cluster-api-controllers-rhel9 +25
  • RHSA-2026:84734 Released 2026-10-19 · Red Hat rating Critical
    RHOAI 3.4.5 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhoai/odh-ai-gateway-payload-processing-rhel9, registry.redhat.io/rhoai/odh-automl-rhel9, registry.redhat.io/rhoai/odh-autorag-rhel9 +47
  • RHSA-2026:83013 Released 2026-10-14 · Red Hat rating Important
    Logging for Red Hat OpenShift - 6.0.17
    • Logging Subsystem for Red Hat OpenShift 6.0 registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator, registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/logging-loki-rhel9 +3
  • RHSA-2026:82354 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.18.2
    • Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
  • RHSA-2026:82322 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.17.2
    • Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
  • RHSA-2026:82304 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.17.2
    • Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
  • RHSA-2026:79320 Released 2026-10-13 · Red Hat rating Important
    OpenShift Container Platform 4.20.42 bug fix and security update
    • Red Hat OpenShift Container Platform 4.20 registry.redhat.io/openshift4/openstack-resource-controller-rhel9, registry.redhat.io/openshift4/ose-aws-cluster-api-controllers-rhel9, registry.redhat.io/openshift4/ose-baremetal-installer-rhel9 +9
  • RHSA-2026:74381 Released 2026-10-06 · Red Hat rating Important
    OpenShift Container Platform 4.20.41 security and extras update
    • Red Hat OpenShift Container Platform 4.20 registry.redhat.io/openshift4/kube-compare-artifacts-rhel9, registry.redhat.io/openshift4/nmstate-console-plugin-rhel9, registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9 +2
  • RHSA-2026:74429 Released 2026-10-06 · Red Hat rating Important
    OpenShift Container Platform 4.22.17 bug fix and security update
    • Red Hat OpenShift Container Platform 4.22 registry.redhat.io/openshift4/oc-mirror-plugin-rhel9, registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9, registry.redhat.io/openshift4/ose-aws-cluster-api-controllers-rhel9 +15
  • RHSA-2026:74383 Released 2026-10-06 · Red Hat rating Important
    OpenShift Container Platform 4.21.36 bug fix and security update
    • Red Hat OpenShift Container Platform 4.21 registry.redhat.io/openshift4/frr-rhel9, registry.redhat.io/openshift4/oc-mirror-plugin-rhel9, registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9 +12
  • RHSA-2026:74430 Released 2026-10-06 · Red Hat rating Important
    OpenShift Container Platform 4.22.17 security and extras update
    • Red Hat OpenShift Container Platform 4.22 registry.redhat.io/openshift4/kube-compare-artifacts-rhel9, registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9, registry.redhat.io/openshift4/ose-local-storage-mustgather-rhel9
  • RHSA-2026:74384 Released 2026-10-06 · Red Hat rating Important
    OpenShift Container Platform 4.21.36 security and extras update
    • Red Hat OpenShift Container Platform 4.21 registry.redhat.io/openshift4/kube-compare-artifacts-rhel9, registry.redhat.io/openshift4/nmstate-console-plugin-rhel9, registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9
  • RHSA-2026:73987 Released 2026-09-30 · Red Hat rating Critical
    RHOAI 3.3.7 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9, registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9 +47
  • RHSA-2026:71454 Released 2026-09-29 · Red Hat rating Important
    OpenShift Container Platform 4.22.16 bug fix and security update
    • Red Hat OpenShift Container Platform 4.22 registry.redhat.io/openshift4/aws-node-termination-handler-rhel9, registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9, registry.redhat.io/openshift4/ose-cluster-cloud-controller-manager-rhel9-operator +8
  • RHSA-2026:71450 Released 2026-09-29 · Red Hat rating Important
    OpenShift Container Platform 4.20.40 bug fix and security update
    • Red Hat OpenShift Container Platform 4.20 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9 +47
  • RHSA-2026:71453 Released 2026-09-29 · Red Hat rating Important
    OpenShift Container Platform 4.21.35 bug fix and security update
    • Red Hat OpenShift Container Platform 4.21 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9 +47
  • RHSA-2026:70870 Released 2026-09-23 · Red Hat rating Important
    Logging for Red Hat OpenShift - 6.5.3
    • Logging Subsystem for Red Hat OpenShift 6.5 registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator, registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/logging-loki-rhel9 +3
  • RHSA-2026:68541 Released 2026-09-22 · Red Hat rating Important
    OpenShift Container Platform 4.20.39 bug fix and security update
    • Red Hat OpenShift Container Platform 4.20 registry.redhat.io/openshift4/egress-router-cni-rhel9, registry.redhat.io/openshift4/ose-cluster-ingress-rhel9-operator, registry.redhat.io/openshift4/ose-csi-external-resizer-rhel9 +10
  • RHSA-2026:68546 Released 2026-09-22 · Red Hat rating Important
    OpenShift Container Platform 4.21.34 bug fix and security update
    • Red Hat OpenShift Container Platform 4.21 registry.redhat.io/openshift4/egress-router-cni-rhel9, registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9, registry.redhat.io/openshift4/ose-aws-ebs-csi-driver-rhel9-operator +14
  • RHSA-2026:69293 Released 2026-09-21 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream (v. 9) osbuild-composer-165.1-5.el9_8, osbuild-composer-core-165.1-5.el9_8, osbuild-composer-worker-165.1-5.el9_8
  • RHSA-2026:68334 Released 2026-09-16 · Red Hat rating Important
    Red Hat Edge Manager Version 1.1.4 Security Update
    • RHEM 1.1 for RHEL 10 flightctl-1.1.4-1.el10em, flightctl-agent-1.1.4-1.el10em, flightctl-cli-1.1.4-1.el10em
    • RHEM 1.1 for RHEL 9 flightctl-1.1.4-1.el9em, flightctl-agent-1.1.4-1.el9em, flightctl-cli-1.1.4-1.el9em
  • RHSA-2026:68253 Released 2026-09-16 · Red Hat rating Important
    Red Hat Edge Manager Version 1.1.4 Security Update
    • Red Hat Edge Manager 1.1 registry.redhat.io/rhem/flightctl-alert-exporter-rhel9, registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel9, registry.redhat.io/rhem/flightctl-api-rhel9 +10
  • RHSA-2026:68044 Released 2026-09-16 · Red Hat rating Important
    Red Hat Edge Manager Version 1.1.4 Security Update
    • Red Hat Edge Manager 1.1 registry.redhat.io/rhem/flightctl-alert-exporter-rhel10, registry.redhat.io/rhem/flightctl-alertmanager-proxy-rhel10, registry.redhat.io/rhem/flightctl-api-rhel10 +11
  • RHSA-2026:67538 Released 2026-09-15 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.11.12 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.11 registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/console-rhel9, registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9 +8
  • RHSA-2026:67517 Released 2026-09-15 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) grafana-10.2.6-26.el10_0, grafana-selinux-10.2.6-26.el10_0
  • RHSA-2026:66358 Released 2026-09-15 · Red Hat rating Important
    OpenShift Container Platform 4.22.14 bug fix and security update
    • Red Hat OpenShift Container Platform 4.22 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/aws-node-termination-handler-rhel9 +47
  • RHSA-2026:66377 Released 2026-09-15 · Red Hat rating Important
    OpenShift Container Platform 4.20.38 bug fix and security update
    • Red Hat OpenShift Container Platform 4.20 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9 +47
  • RHSA-2026:66352 Released 2026-09-15 · Red Hat rating Important
    OpenShift Container Platform 4.21.33 bug fix and security update
    • Red Hat OpenShift Container Platform 4.21 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/azure-kms-encryption-provider-rhel9 +47
  • RHSA-2026:67138 Released 2026-09-14 · Red Hat rating Important
    image-builder security update
    • Red Hat Enterprise Linux AppStream (v. 9) image-builder-52.1-2.el9_8
  • RHSA-2026:67139 Released 2026-09-14 · Red Hat rating Important
    image-builder security update
    • Red Hat Enterprise Linux AppStream (v. 10) image-builder-52.1-2.el10_2
  • RHSA-2026:66432 Released 2026-09-11 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream (v. 10) osbuild-composer-165.1-5.el10_2, osbuild-composer-core-165.1-5.el10_2, osbuild-composer-worker-165.1-5.el10_2
  • RHSA-2026:66561 Released 2026-09-11 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images golang1.27-1.27.1-0.1.hum1@aarch64, golang1.27-1.27.1-0.1.hum1@src, golang1.27-1.27.1-0.1.hum1@x86_64 +10
  • RHSA-2026:66022 Released 2026-09-09 · Red Hat rating Important
    Red Hat OpenShift API for Data Protection
    • OpenShift API for Data Protection 1.5 registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-mustgather-rhel9, registry.redhat.io/oadp/oadp-rhel9-operator +4
  • RHSA-2026:63046 Released 2026-09-08 · Red Hat rating Important
    OpenShift Container Platform 4.21.32 bug fix and security update
    • Red Hat OpenShift Container Platform 4.21 registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9, registry.redhat.io/openshift4/ose-baremetal-installer-rhel9, registry.redhat.io/openshift4/ose-cluster-autoscaler-rhel9-operator +6
  • RHSA-2026:63096 Released 2026-09-08 · Red Hat rating Important
    OpenShift Container Platform 4.22.13 bug fix and security update
    • Red Hat OpenShift Container Platform 4.22 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/aws-kms-encryption-provider-rhel9, registry.redhat.io/openshift4/aws-node-termination-handler-rhel9 +47
  • RHSA-2026:65126 Released 2026-09-08 · Red Hat rating Important
    RHOAI 2.25.11 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-caikit-tgis-serving-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9 +47
  • RHSA-2026:63134 Released 2026-09-03 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) osbuild-composer-134.1-10.el10_0, osbuild-composer-core-134.1-10.el10_0, osbuild-composer-worker-134.1-10.el10_0
  • RHSA-2026:63016 Released 2026-09-03 · Red Hat rating Important
    Submariner v0.24 security fixes and container updates
    • Red Hat Advanced Cluster Management for Kubernetes 2.17 registry.redhat.io/rhacm2/lighthouse-agent-rhel9, registry.redhat.io/rhacm2/lighthouse-coredns-rhel9, registry.redhat.io/rhacm2/subctl-rhel9 +4
  • RHSA-2026:62391 Released 2026-09-02 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images golang1.26-1.26.8-0.1.hum1@aarch64, golang1.26-1.26.8-0.1.hum1@src, golang1.26-1.26.8-0.1.hum1@x86_64 +10
  • RHSA-2026:62260 Released 2026-09-01 · Red Hat rating Important
    Red Hat OpenShift Dev Spaces 3.30.0 Release.
    • Red Hat OpenShift Dev Spaces 3.30 registry.redhat.io/devspaces/code-rhel9, registry.redhat.io/devspaces/configbump-rhel9, registry.redhat.io/devspaces/dashboard-rhel9 +7
  • RHSA-2026:60441 Released 2026-09-01 · Red Hat rating Important
    OpenShift Container Platform 4.22.12 bug fix and security update
    • Red Hat OpenShift Container Platform 4.22 registry.redhat.io/openshift4/egress-router-cni-rhel9, registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9, registry.redhat.io/openshift4/ose-aws-ebs-csi-driver-rhel9-operator +23
  • RHSA-2026:61585 Released 2026-08-31 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) osbuild-composer-76.1-8.el9_2, osbuild-composer-core-76.1-8.el9_2, osbuild-composer-dnf-json-76.1-8.el9_2 +1
  • RHSA-2026:60520 Released 2026-08-27 · Red Hat rating Critical
    RHOAI 3.4.4 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhoai/odh-automl-rhel9, registry.redhat.io/rhoai/odh-autorag-rhel9, registry.redhat.io/rhoai/odh-built-in-detector-rhel9 +47
  • RHSA-2026:60388 Released 2026-08-26 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.14.4 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.14 registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9, registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9 +26
  • RHSA-2026:60387 Released 2026-08-26 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.11.11 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.11 registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9, registry.redhat.io/rhacm2/acm-must-gather-rhel9, registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9 +24
  • RHSA-2026:60386 Released 2026-08-26 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.17.1 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.17 registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9, registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9 +31
  • RHSA-2026:59560 Released 2026-08-25 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) osbuild-composer-132.2-11.el9_6, osbuild-composer-core-132.2-11.el9_6, osbuild-composer-worker-132.2-11.el9_6
  • RHSA-2026:59562 Released 2026-08-25 · Red Hat rating Important
    osbuild-composer security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) osbuild-composer-101.3-4.el9_4.5, osbuild-composer-core-101.3-4.el9_4.5, osbuild-composer-worker-101.3-4.el9_4.5
  • RHSA-2026:59559 Released 2026-08-25 · Red Hat rating Important
    multicluster engine for Kubernetes v2.9.7 security update
    • multicluster engine for Kubernetes 2.9 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/cluster-curator-controller-rhel9, registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9 +15
  • RHSA-2026:59558 Released 2026-08-25 · Red Hat rating Important
    multicluster engine for Kubernetes v2.8.10 security update
    • multicluster engine for Kubernetes 2.8 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/backplane-rhel9-operator, registry.redhat.io/multicluster-engine/cluster-api-provider-agent-rhel9 +20
  • RHSA-2026:59467 Released 2026-08-25 · Red Hat rating Important
    Red Hat OpenShift API for Data Protection
    • OpenShift API for Data Protection 1.4 registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-mustgather-rhel9, registry.redhat.io/oadp/oadp-rhel9-operator +3
  • RHSA-2026:57365 Released 2026-08-25 · Red Hat rating Important
    OpenShift Container Platform 4.22.11 bug fix and security update
    • Red Hat OpenShift Container Platform 4.22 registry.redhat.io/openshift4/aws-karpenter-provider-aws-rhel9, registry.redhat.io/openshift4/oc-mirror-plugin-rhel9, registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9 +6
  • RHSA-2026:57194 Released 2026-08-19 · Red Hat rating Important
    multicluster engine for Kubernetes v2.11.5 security update
    • multicluster engine for Kubernetes 2.11 registry.redhat.io/multicluster-engine/addon-manager-rhel9, registry.redhat.io/multicluster-engine/backplane-rhel9-operator, registry.redhat.io/multicluster-engine/cluster-api-provider-kubevirt-rhel9 +11
  • RHSA-2026:57191 Released 2026-08-19 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.16.3 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.16 registry.redhat.io/rhacm2/acm-grafana-rhel9, registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9, registry.redhat.io/rhacm2/acm-prometheus-rhel9 +15
  • RHSA-2026:57013 Released 2026-08-19 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.20.17 security, enhancement & bug fix update
    • Red Hat Openshift Data Foundation 4.20 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/cephcsi-rhel9-operator, registry.redhat.io/odf4/mcg-core-rhel9 +19
  • RHSA-2026:56366 Released 2026-08-18 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.19.22 security, enhancement & bug fix update
    • Red Hat Openshift Data Foundation 4.19 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/cephcsi-rhel9-operator, registry.redhat.io/odf4/mcg-core-rhel9 +17
  • RHSA-2026:56347 Released 2026-08-18 · Red Hat rating Important
    Migration Toolkit for Applications
    • Red Hat Migration Toolkit for Applications 8.2 registry.redhat.io/mta/mta-analyzer-addon-rhel9, registry.redhat.io/mta/mta-cli-rhel9, registry.redhat.io/mta/mta-discovery-addon-rhel9 +4
  • RHSA-2026:56340 Released 2026-08-18 · Red Hat rating Important
    Logging for Red Hat OpenShift - 6.5.2
    • Logging Subsystem for Red Hat OpenShift 6.5 registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator, registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/logging-loki-rhel9 +3
  • RHSA-2026:54770 Released 2026-08-18 · Red Hat rating Important
    OpenShift Container Platform 4.22.10 bug fix and security update
    • Red Hat OpenShift Container Platform 4.22 registry.redhat.io/openshift4/ose-agent-installer-csr-approver-rhel9, registry.redhat.io/openshift4/ose-azure-file-csi-driver-rhel9, registry.redhat.io/openshift4/ose-cluster-image-registry-rhel9-operator +11
  • RHSA-2026:54531 Released 2026-08-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.19.1
    • Cert Manager support for Red Hat OpenShift release 1.19 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
  • RHSA-2026:54527 Released 2026-08-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.19.1
    • Cert Manager support for Red Hat OpenShift release 1.19 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
  • RHSA-2026:54441 Released 2026-08-12 · Red Hat rating Important
    Red Hat Lightspeed (formerly Insights) for Runtimes security update
    • Red Hat Lightspeed (formerly Insights) for Runtimes 1.0 registry.redhat.io/rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator
  • RHSA-2026:54288 Released 2026-08-12 · Red Hat rating Important
    OpenShift File Integrity Operator bug fix and enhancement update
    • OpenShift File Integrity Operator - FIO 1 registry.redhat.io/compliance/openshift-file-integrity-rhel8-operator
  • RHSA-2026:54287 Released 2026-08-12 · Red Hat rating Important
    Red Hat OpenShift Workload Availability Operator v0.12.1 security update
    • Red Hat OpenShift Workload Availability 0.12 registry.redhat.io/workload-availability/node-healthcheck-rhel9-operator
  • RHSA-2026:54286 Released 2026-08-12 · Red Hat rating Important
    Red Hat OpenShift Workload Availability Operator v0.3.1 security update
    • Red Hat OpenShift Workload Availability 0.3 registry.redhat.io/workload-availability/storage-based-remediation-rhel9-operator
  • RHSA-2026:54285 Released 2026-08-12 · Red Hat rating Important
    Red Hat OpenShift Workload Availability Operator v0.7.1 security update
    • Red Hat OpenShift Workload Availability 0.7 registry.redhat.io/workload-availability/machine-deletion-remediation-rhel9-operator
  • RHSA-2026:54284 Released 2026-08-12 · Red Hat rating Important
    Red Hat OpenShift Workload Availability Operator v0.13.1 security update
    • Red Hat OpenShift Workload Availability 0.13 registry.redhat.io/workload-availability/self-node-remediation-rhel9-operator
  • RHSA-2026:54283 Released 2026-08-12 · Red Hat rating Important
    Red Hat OpenShift Workload Availability v5.7.1 security update
    • Red Hat OpenShift Workload Availability 5.7 registry.redhat.io/workload-availability/node-maintenance-rhel9-operator
  • RHSA-2026:54274 Released 2026-08-12 · Red Hat rating Important
    Red Hat OpenShift Workload Availability Operator v0.8.1 security update
    • Red Hat OpenShift Workload Availability 0.8 registry.redhat.io/workload-availability/fence-agents-remediation-rhel9-operator
  • RHSA-2026:53415 Released 2026-08-11 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) opentelemetry-collector-0.152.1-1.el9_6
  • RHSA-2026:53412 Released 2026-08-11 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) opentelemetry-collector-0.152.1-1.el9_4
  • RHSA-2026:53413 Released 2026-08-11 · Red Hat rating Important
    opentelemetry-collector security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) opentelemetry-collector-0.152.1-1.el10_0
  • RHSA-2026:51038 Released 2026-08-11 · Red Hat rating Important
    OpenShift Container Platform 4.22.9 bug fix and security update
    • Red Hat OpenShift Container Platform 4.22 registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9, registry.redhat.io/openshift4/ose-console-rhel9, registry.redhat.io/openshift4/ose-hyperkube-rhel9 +4
  • RHSA-2026:52910 Released 2026-08-10 · Red Hat rating Important
    Red Hat OpenShift GitOps v1.20.6 security update
    • Red Hat OpenShift GitOps 1.20 registry.redhat.io/openshift-gitops-1/argocd-rhel9, registry.redhat.io/openshift-gitops-1/dex-rhel9
  • RHSA-2026:52857 Released 2026-08-10 · Red Hat rating Important
    Red Hat OpenShift GitOps v1.19.6 security update
    • Red Hat OpenShift GitOps 1.19 registry.redhat.io/openshift-gitops-1/argocd-rhel8, registry.redhat.io/openshift-gitops-1/dex-rhel8, registry.redhat.io/openshift-gitops-1/gitops-rhel8-operator
  • RHSA-2026:51341 Released 2026-08-06 · Red Hat rating Important
    Technical preview of the satellite/iop-vmaas-rhel9 container image
    • Red Hat Satellite 6.18 registry.redhat.io/satellite/iop-vmaas-rhel9
  • RHSA-2026:51112 Released 2026-08-06 · Red Hat rating Important
    grafana security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) grafana-10.2.6-22.el9_6, grafana-selinux-10.2.6-22.el9_6
  • RHSA-2026:51033 Released 2026-08-06 · Red Hat rating Important
    Red Hat OpenShift API for Data Protection
    • OpenShift API for Data Protection 1.3 registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9, registry.redhat.io/oadp/oadp-mustgather-rhel9, registry.redhat.io/oadp/oadp-rhel9-operator +7
  • RHSA-2026:50894 Released 2026-08-05 · Red Hat rating Important
    RHTAS 1.4.3 - Red Hat Trusted Artifact Signer Release
    • Red Hat Trusted Artifact Signer 1.4 registry.redhat.io/rhtas/rhtas-rhel9-operator
  • RHSA-2026:50843 Released 2026-08-05 · Red Hat rating Important
    Logging for Red Hat OpenShift - 6.0.16
    • Logging Subsystem for Red Hat OpenShift 6.0 registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator, registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/logging-loki-rhel9 +3
  • RHSA-2026:50300 Released 2026-08-04 · Red Hat rating Important
    Migration Toolkit for Applications
    • Red Hat Migration Toolkit for Applications 8.1 registry.redhat.io/mta/mta-cli-rhel9, registry.redhat.io/mta/mta-ui-rhel9
  • RHSA-2026:48151 Released 2026-07-29 · Red Hat rating Important
    Red Hat build of Cryostat security update
    • Cryostat 4 on RHEL 9 cryostat/cryostat-grafana-dashboard-rhel9, cryostat/cryostat-openshift-console-plugin-rhel9, cryostat/cryostat-reports-rhel9 +4
  • RHSA-2026:47952 Released 2026-07-29 · Red Hat rating Important
    Logging for Red Hat OpenShift - 6.2.12
    • Logging Subsystem for Red Hat OpenShift 6.2 registry.redhat.io/openshift-logging/cluster-logging-rhel9-operator, registry.redhat.io/openshift-logging/eventrouter-rhel9, registry.redhat.io/openshift-logging/logging-loki-rhel9 +3
  • RHSA-2026:47949 Released 2026-07-29 · Red Hat rating Critical
    multicluster engine for Kubernetes v2.6.13 security update
    • multicluster engine for Kubernetes 2.6 registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9, registry.redhat.io/multicluster-engine/cluster-proxy-rhel9, registry.redhat.io/multicluster-engine/console-mce-rhel9 +2
  • RHSA-2026:47737 Released 2026-07-29 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.13.10 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.13 registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9, registry.redhat.io/rhacm2/acm-prometheus-rhel9, registry.redhat.io/rhacm2/console-rhel9 +6
  • RHSA-2026:47735 Released 2026-07-29 · Red Hat rating Critical
    multicluster engine for Kubernetes v2.8.9 security update
    • multicluster engine for Kubernetes 2.8 registry.redhat.io/multicluster-engine/backplane-rhel9-operator, registry.redhat.io/multicluster-engine/cluster-image-set-controller-rhel9, registry.redhat.io/multicluster-engine/cluster-proxy-rhel9 +5
  • RHSA-2026:47451 Released 2026-07-28 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.15.4 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.15 registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9, registry.redhat.io/rhacm2/acm-prometheus-rhel9, registry.redhat.io/rhacm2/console-rhel9 +9
  • RHSA-2026:44237 Released 2026-07-28 · Red Hat rating Important
    OpenShift Container Platform 4.22.7 bug fix and security update
    • Red Hat OpenShift Container Platform 4.22 registry.redhat.io/openshift4/ose-agent-installer-ui-rhel9, registry.redhat.io/openshift4/ose-cluster-capi-rhel9-operator, registry.redhat.io/openshift4/ose-console-rhel9 +1
  • RHSA-2026:44239 Released 2026-07-28 · Red Hat rating Important
    OpenShift Container Platform 4.22.7 security and extras update
    • Red Hat OpenShift Container Platform 4.22 registry.redhat.io/openshift4/nmstate-console-plugin-rhel9, registry.redhat.io/openshift4/ose-ptp-rhel9-operator
  • RHSA-2026:46903 Released 2026-07-27 · Red Hat rating Important
    Red Hat Advanced Cluster Management for Kubernetes v2.15.4 security update
    • Red Hat Advanced Cluster Management for Kubernetes 2.15 registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9, registry.redhat.io/rhacm2/acm-prometheus-rhel9, registry.redhat.io/rhacm2/console-rhel9 +9
  • RHSA-2026:44622 Released 2026-07-23 · Red Hat rating Important
    Multicluster Global Hub 1.6.4 security update
    • Multicluster Global Hub 1.6.6 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +1
  • RHSA-2026:43692 Released 2026-07-22 · Red Hat rating Important
    Red Hat OpenShift API for Data Protection
    • OpenShift API for Data Protection 1.6 registry.redhat.io/oadp/oadp-velero-rhel9
  • RHSA-2026:43038 Released 2026-07-21 · Red Hat rating Critical
    Migration Toolkit for Applications
    • Red Hat Migration Toolkit for Applications 8.2 registry.redhat.io/mta/mta-cli-rhel9, registry.redhat.io/mta/mta-solution-server-rhel9
  • RHSA-2026:42852 Released 2026-07-21 · Red Hat rating Important
    Multicluster Global Hub 1.5.6 security update
    • Multicluster Global Hub 1.5.8 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +1
  • RHSA-2026:42644 Released 2026-07-21 · Red Hat rating Important
    RHOAI 2.25.9 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-caikit-tgis-serving-rhel9, registry.redhat.io/rhoai/odh-feature-server-rhel9, registry.redhat.io/rhoai/odh-kserve-storage-initializer-rhel9 +36
  • RHSA-2026:42142 Released 2026-07-20 · Red Hat rating Important
    Red Hat Ansible Automation Platform 2.7 Container Release Update
    • Red Hat Ansible Automation Platform 2.7 registry.redhat.io/ansible-automation-platform-27/gateway-rhel9, registry.redhat.io/ansible-automation-platform-27/hub-rhel9, registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9 +3
  • RHSA-2026:42132 Released 2026-07-20 · Red Hat rating Important
    Red Hat Ansible Automation Platform 2.6 Container Release Update
    • Red Hat Ansible Automation Platform 2.6 registry.redhat.io/ansible-automation-platform-26/controller-rhel9, registry.redhat.io/ansible-automation-platform-26/de-minimal-rhel9, registry.redhat.io/ansible-automation-platform-26/de-supported-rhel9 +7
  • RHSA-2026:42079 Released 2026-07-20 · Red Hat rating Important
    Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update
    • Red Hat Ansible Automation Platform 2.6 for RHEL 10 ansible-core-2:2.16.19-1.el10ap, receptor-1.6.6-1.el10ap
    • Red Hat Ansible Automation Platform 2.6 for RHEL 9 ansible-core-1:2.16.19-1.el9ap, automation-controller-venv-tower-4.7.14-3.el9ap, automation-gateway-proxy-2.6.17-1.el9ap +5
  • RHSA-2026:42078 Released 2026-07-20 · Red Hat rating Important
    Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
    • Red Hat Ansible Automation Platform 2.5 for RHEL 8 ansible-core-1:2.16.19-1.el8ap, ansible-test-1:2.16.19-1.el8ap, automation-controller-4.6.30-2.el8ap +24
    • Red Hat Ansible Automation Platform 2.5 for RHEL 9 ansible-core-1:2.16.19-1.el9ap, ansible-test-1:2.16.19-1.el9ap, automation-controller-4.6.30-2.el9ap +24
  • RHSA-2026:42080 Released 2026-07-20 · Red Hat rating Important
    Red Hat Ansible Automation Platform 2.7 Product Security and Bug Fix Update
    • Red Hat Ansible Automation Platform 2.7 for RHEL 10 ansible-core-2:2.16.19-1.el10ap, receptor-1.6.6-1.el10ap
    • Red Hat Ansible Automation Platform 2.7 for RHEL 9 ansible-core-1:2.16.19-1.el9ap, receptor-1.6.6-1.el9ap
  • RHSA-2026:41928 Released 2026-07-20 · Red Hat rating Important
    Red Hat Migration Toolkit for Containers
    • Red Hat Migration Toolkit 1.8 registry.redhat.io/rhmtc/openshift-migration-controller-rhel8, registry.redhat.io/rhmtc/openshift-migration-hook-runner-rhel8, registry.redhat.io/rhmtc/openshift-migration-log-reader-rhel8 +6
  • RHSA-2026:41036 Released 2026-07-16 · Red Hat rating Important
    Red Hat OpenShift Builds 1.8.1
    • Red Hat OpenShift Builds 1.8.3 registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9, registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9 +6
  • RHSA-2026:41030 Released 2026-07-16 · Red Hat rating Important
    Multicluster Global Hub 1.4.7 security update
    • Multicluster Global Hub 1.4.9 registry.redhat.io/multicluster-globalhub/multicluster-globalhub-agent-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-grafana-rhel9, registry.redhat.io/multicluster-globalhub/multicluster-globalhub-manager-rhel9 +1
  • RHSA-2026:37387 Released 2026-07-09 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.22.0 security, enhancement & bug fix update
    • Red Hat Openshift Data Foundation 4.22 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/cephcsi-rhel9-operator, registry.redhat.io/odf4/devicefinder-rhel9 +24
  • RHSA-2026:37123 Released 2026-07-09 · Red Hat rating Important
    podman security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream (v. 9) podman-6:5.8.2-4.el9_8, podman-docker-6:5.8.2-4.el9_8, podman-plugins-6:5.8.2-4.el9_8 +2
  • RHSA-2026:37072 Released 2026-07-09 · Red Hat rating Important
    podman security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream (v. 10) podman-7:5.8.2-4.el10_2, podman-docker-7:5.8.2-4.el10_2, podman-remote-7:5.8.2-4.el10_2
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) podman-tests-7:5.8.2-4.el10_2
  • RHSA-2026:36754 Released 2026-07-08 · Red Hat rating Important
    Red Hat Developer Hub 1.10.2 release.
    • Red Hat Developer Hub 1.10 registry.redhat.io/rhdh/rhdh-hub-rhel9, registry.redhat.io/rhdh/rhdh-rhel9-operator
  • RHSA-2026:36207 Released 2026-07-07 · Red Hat rating Important
    RHACS 4.11.1 security and bug fix update
    • Red Hat Advanced Cluster Security for Kubernetes 4.11 registry.redhat.io/advanced-cluster-security/rhacs-main-rhel9, registry.redhat.io/advanced-cluster-security/rhacs-operator-bundle, registry.redhat.io/advanced-cluster-security/rhacs-rhel9-operator +4

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    golang.org/x/net/html 0.55.0

    5 records Highest priority Priority LOW 5 LOW

    Other records, highest priority first

    • TI-2026-20765 Invoking denial of service when parsing arbitrary HTML in golang.org/x/net/htmlPriority LOW 29
    • TI-2026-30789 Invoking incorrect handling of namespaced elements in foreign content in golang.org/x/net/htmlPriority LOW 27
    • TI-2026-30785 Invoking incorrect handling of HTML elements in foreign content in golang.org/x/net/htmlPriority LOW 27
    Show all 5 records →

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Assisted Installer for Red Hat OpenShift Container Platform 2AffectedNo fix yet
Compliance OperatorAffectedNo fix yet
Confidential Compute AttestationAffectedNo fix planned: Will not fix
Cryostat 4AffectedNo fix yet
External Secrets Operator for Red Hat OpenShiftAffectedNo fix planned: Will not fix
Fence Agents Remediation OperatorAffectedNo fix yet
File Integrity OperatorAffectedNo fix yet
Machine Deletion Remediation OperatorAffectedNo fix yet
Migration Toolkit for Applications 8AffectedNo fix planned: Will not fix
Multiarch Tuning OperatorAffectedNo fix yet
Multicluster Engine for KubernetesAffectedNo fix yet
Node HealthCheck OperatorAffectedNo fix yet
Node Maintenance OperatorAffectedNo fix yet
OpenShift Developer Tools and ServicesAffectedNo fix yet
OpenShift LightspeedAffectedNo fix yet
OpenShift PipelinesAffectedNo fix yet
OpenShift ServerlessAffectedNo fix yet
Red Hat Advanced Cluster Management for Kubernetes 2AffectedNo fix yet
Red Hat Advanced Cluster Security 4AffectedNo fix yet
Red Hat Connectivity Link 1AffectedNo fix yet
Red Hat Enterprise Linux 10AffectedNo fix yet
Red Hat Enterprise Linux 8AffectedNo fix yet
Red Hat Enterprise Linux 9AffectedNo fix yet
Red Hat Hardened ImagesAffectedNo fix planned: Will not fix
Red Hat OpenShift AI (RHOAI)AffectedNo fix yet
Red Hat OpenShift Cluster Manager CLIAffectedNo fix yet
Red Hat OpenShift Container Platform 4AffectedNo fix yet
Red Hat OpenShift Container Platform 5AffectedNo fix yet
Red Hat OpenShift Dev Workspaces OperatorAffectedNo fix yet
Red Hat OpenShift GitOpsAffectedNo fix yet
Red Hat OpenShift Virtualization 4AffectedNo fix yet
Red Hat OpenShift distributed tracing 3AffectedNo fix yet
Red Hat OpenShift on AWSAffectedNo fix yet
Red Hat Trusted Artifact SignerAffectedNo fix yet
Security Profiles OperatorAffectedNo fix yet
Self Node Remediation OperatorAffectedNo fix yet
Storage-Based RemediationAffectedNo fix yet
Zero Trust Workload Identity ManagerAffectedNo fix planned: Will not fix
Zero Trust Workload Identity Manager - Tech PreviewAffectedNo fix planned: Will not fix
cert-manager Operator for Red Hat OpenShiftAffectedNo fix yet
Cert Manager support for Red Hat OpenShift release 1.17Fixed RHSA-2026:82304, RHSA-2026:82322
Cert Manager support for Red Hat OpenShift release 1.18Fixed RHSA-2026:82354
Cert Manager support for Red Hat OpenShift release 1.19Fixed RHSA-2026:54527, RHSA-2026:54531
Cryostat 4 on RHEL 9Fixed RHSA-2026:48151
Logging Subsystem for Red Hat OpenShift 6.0Fixed RHSA-2026:50843, RHSA-2026:83013
Logging Subsystem for Red Hat OpenShift 6.2Fixed RHSA-2026:47952
Logging Subsystem for Red Hat OpenShift 6.5Fixed RHSA-2026:56340, RHSA-2026:70870
Multicluster Global Hub 1.4.9Fixed RHSA-2026:41030
Multicluster Global Hub 1.5.8Fixed RHSA-2026:42852
Multicluster Global Hub 1.6.6Fixed RHSA-2026:44622
OpenShift API for Data Protection 1.3Fixed RHSA-2026:51033
OpenShift API for Data Protection 1.4Fixed RHSA-2026:59467
OpenShift API for Data Protection 1.5Fixed RHSA-2026:66022
OpenShift API for Data Protection 1.6Fixed RHSA-2026:43692
OpenShift Compliance Operator 1Fixed RHSA-2026:95612
OpenShift File Integrity Operator - FIO 1Fixed RHSA-2026:54288
RHEM 1.1 for RHEL 10Fixed RHSA-2026:68334
RHEM 1.1 for RHEL 9Fixed RHSA-2026:68334
Red Hat Advanced Cluster Management for Kubernetes 2.11Fixed RHSA-2026:60387, RHSA-2026:67538
Red Hat Advanced Cluster Management for Kubernetes 2.13Fixed RHSA-2026:47737
Red Hat Advanced Cluster Management for Kubernetes 2.14Fixed RHSA-2026:60388
Red Hat Advanced Cluster Management for Kubernetes 2.15Fixed RHSA-2026:46903
Red Hat Advanced Cluster Management for Kubernetes 2.16Fixed RHSA-2026:57191
Red Hat Advanced Cluster Management for Kubernetes 2.17Fixed RHSA-2026:60386, RHSA-2026:63016
Red Hat Advanced Cluster Security for Kubernetes 4.11Fixed RHSA-2026:36207
Red Hat Ansible Automation Platform 2.5 for RHEL 8Fixed RHSA-2026:42078
Red Hat Ansible Automation Platform 2.5 for RHEL 9Fixed RHSA-2026:42078
Red Hat Ansible Automation Platform 2.6Fixed RHSA-2026:42132
Red Hat Ansible Automation Platform 2.6 for RHEL 10Fixed RHSA-2026:42079
Red Hat Ansible Automation Platform 2.6 for RHEL 9Fixed RHSA-2026:42079
Red Hat Ansible Automation Platform 2.7Fixed RHSA-2026:42142
Red Hat Ansible Automation Platform 2.7 for RHEL 10Fixed RHSA-2026:42080
Red Hat Ansible Automation Platform 2.7 for RHEL 9Fixed RHSA-2026:42080
Red Hat Developer Hub 1.10Fixed RHSA-2026:36754
Red Hat Edge Manager 1.1Fixed RHSA-2026:68044, RHSA-2026:68253
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2026:37072, RHSA-2026:66432, RHSA-2026:67139
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2026:37123, RHSA-2026:67138, RHSA-2026:69293
Red Hat Enterprise Linux AppStream AUS (v.8.6)Fixed RHSA-2026:90493
Red Hat Enterprise Linux AppStream E4S (v.8.8)Fixed RHSA-2026:90363
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2026:61585
Red Hat Enterprise Linux AppStream E4S (v.9.4)Fixed RHSA-2026:53412, RHSA-2026:59562
Red Hat Enterprise Linux AppStream EUS (v. 10.0)Fixed RHSA-2026:53413, RHSA-2026:63134, RHSA-2026:67517
Red Hat Enterprise Linux AppStream EUS (v.9.6)Fixed RHSA-2026:51112, RHSA-2026:53415, RHSA-2026:59560
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)Fixed RHSA-2026:90493
Red Hat Enterprise Linux AppStream TUS (v.8.8)Fixed RHSA-2026:90363
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)Fixed RHSA-2026:37072
Red Hat Hardened ImagesFixed RHSA-2026:62391, RHSA-2026:66561
Red Hat Lightspeed (formerly Insights) for Runtimes 1.0Fixed RHSA-2026:54441
Red Hat Migration Toolkit 1.8Fixed RHSA-2026:41928
Red Hat Migration Toolkit for Applications 8.1Fixed RHSA-2026:50300
Red Hat Migration Toolkit for Applications 8.2Fixed RHSA-2026:43038, RHSA-2026:56347
Red Hat OpenShift AI 2.25Fixed RHSA-2026:42644, RHSA-2026:65126, RHSA-2026:87410
Red Hat OpenShift AI 3.3Fixed RHSA-2026:73987
Red Hat OpenShift AI 3.4Fixed RHSA-2026:60520, RHSA-2026:84734, RHSA-2026:91248, RHSA-2026:92510
Red Hat OpenShift AI 3.5Fixed RHSA-2026:91249
Red Hat OpenShift Builds 1.8.3Fixed RHSA-2026:41036
Red Hat OpenShift Container Platform 4.20Fixed RHSA-2026:66377, RHSA-2026:68541, RHSA-2026:71450, RHSA-2026:74381, RHSA-2026:79320
Red Hat OpenShift Container Platform 4.21Fixed RHSA-2026:63046, RHSA-2026:66352, RHSA-2026:68546, RHSA-2026:71453, RHSA-2026:74383, RHSA-2026:74384, RHSA-2026:83702
Red Hat OpenShift Container Platform 4.22Fixed RHSA-2026:44237, RHSA-2026:44239, RHSA-2026:51038, RHSA-2026:54770, RHSA-2026:57365, RHSA-2026:60441, RHSA-2026:63096, RHSA-2026:66358, RHSA-2026:71454, RHSA-2026:74429, RHSA-2026:74430
Red Hat OpenShift Dev Spaces 3.30Fixed RHSA-2026:62260
Red Hat OpenShift GitOps 1.19Fixed RHSA-2026:52857
Red Hat OpenShift GitOps 1.20Fixed RHSA-2026:52910
Red Hat OpenShift Workload Availability 0.12Fixed RHSA-2026:54287
Red Hat OpenShift Workload Availability 0.13Fixed RHSA-2026:54284
Red Hat OpenShift Workload Availability 0.3Fixed RHSA-2026:54286
Red Hat OpenShift Workload Availability 0.7Fixed RHSA-2026:54285
Red Hat OpenShift Workload Availability 0.8Fixed RHSA-2026:54274
Red Hat OpenShift Workload Availability 5.7Fixed RHSA-2026:54283
Red Hat Openshift Data Foundation 4.19Fixed RHSA-2026:56366
Red Hat Openshift Data Foundation 4.20Fixed RHSA-2026:57013
Red Hat Openshift Data Foundation 4.22Fixed RHSA-2026:37387
Red Hat Satellite 6.18Fixed RHSA-2026:51341
Red Hat Trusted Artifact Signer 1.4Fixed RHSA-2026:50894
multicluster engine for Kubernetes 2.11Fixed RHSA-2026:57194
multicluster engine for Kubernetes 2.6Fixed RHSA-2026:47949
multicluster engine for Kubernetes 2.8Fixed RHSA-2026:47735, RHSA-2026:59558
multicluster engine for Kubernetes 2.9Fixed RHSA-2026:59559
Not affected: 83 products
  • Cryostat 4 on RHEL 9
  • ExternalDNS Operator
  • File Integrity Operator
  • Gatekeeper 3
  • Logging Subsystem for Red Hat OpenShift 6.0
  • Logging Subsystem for Red Hat OpenShift 6.2
  • Logging Subsystem for Red Hat OpenShift 6.5
  • Logical Volume Manager Storage
  • Migration Toolkit for Applications 8
  • Multicluster Engine for Kubernetes
  • Multicluster Global Hub 1.4.9
  • Multicluster Global Hub 1.5.8
  • Multicluster Global Hub 1.6.6
  • Network Observability Operator
  • OpenShift API for Data Protection 1.3
  • OpenShift API for Data Protection 1.4
  • OpenShift API for Data Protection 1.5
  • OpenShift API for Data Protection 1.6
  • OpenShift Compliance Operator 1
  • OpenShift File Integrity Operator - FIO 1
  • OpenShift Service Mesh 3
  • RHEM 1.1 for RHEL 10
  • RHEM 1.1 for RHEL 9
  • Red Hat 3scale API Management Platform 2
  • Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Advanced Cluster Management for Kubernetes 2.11
  • Red Hat Advanced Cluster Management for Kubernetes 2.13
  • Red Hat Advanced Cluster Management for Kubernetes 2.14
  • Red Hat Advanced Cluster Management for Kubernetes 2.15
  • Red Hat Advanced Cluster Management for Kubernetes 2.16
  • Red Hat Advanced Cluster Management for Kubernetes 2.17
  • Red Hat Advanced Cluster Security for Kubernetes 4.11
  • Red Hat Ansible Automation Platform 2.5 for RHEL 8
  • Red Hat Ansible Automation Platform 2.5 for RHEL 9
  • Red Hat Ansible Automation Platform 2.6
  • Red Hat Ansible Automation Platform 2.6 for RHEL 10
  • Red Hat Ansible Automation Platform 2.6 for RHEL 9
  • Red Hat Ansible Automation Platform 2.7
  • Red Hat Ansible Automation Platform 2.7 for RHEL 10
  • Red Hat Ansible Automation Platform 2.7 for RHEL 9
  • Red Hat Developer Hub 1.10
  • Red Hat Edge Manager 1.1
  • Red Hat Enterprise Linux 8
  • Red Hat Lightspeed (formerly Insights) for Runtimes 1.0
  • Red Hat Migration Toolkit 1.8
  • Red Hat Migration Toolkit for Applications 8.1
  • Red Hat Migration Toolkit for Applications 8.2
  • Red Hat OpenShift AI (RHOAI)
  • Red Hat OpenShift AI 2.25
  • Red Hat OpenShift AI 3.3
  • Red Hat OpenShift AI 3.4
  • Red Hat OpenShift Builds 1.8.3
  • Red Hat OpenShift Container Platform 4
  • Red Hat OpenShift Container Platform 4.20
  • Red Hat OpenShift Container Platform 4.21
  • Red Hat OpenShift Container Platform 4.22
  • Red Hat OpenShift Container Platform 5
  • Red Hat OpenShift Dev Spaces
  • Red Hat OpenShift Dev Spaces 3.30
  • Red Hat OpenShift GitOps
  • Red Hat OpenShift GitOps 1.19
  • Red Hat OpenShift GitOps 1.20
  • Red Hat OpenShift Virtualization 4
  • Red Hat OpenShift Workload Availability 0.12
  • Red Hat OpenShift Workload Availability 0.13
  • Red Hat OpenShift Workload Availability 0.3
  • Red Hat OpenShift Workload Availability 0.7
  • Red Hat OpenShift Workload Availability 0.8
  • Red Hat OpenShift Workload Availability 5.7
  • Red Hat OpenShift for Windows Containers
  • Red Hat OpenStack Platform 16.2
  • Red Hat OpenStack Platform 17.1
  • Red Hat OpenStack Platform 18.0
  • Red Hat Openshift Data Foundation 4.19
  • Red Hat Openshift Data Foundation 4.20
  • Red Hat Openshift Data Foundation 4.22
  • Red Hat Quay 3
  • Red Hat Service Interconnect 2
  • Red Hat Trusted Artifact Signer 1.4
  • multicluster engine for Kubernetes 2.11
  • multicluster engine for Kubernetes 2.6
  • multicluster engine for Kubernetes 2.8
  • multicluster engine for Kubernetes 2.9

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-27136
  2. 2026-10-03 Alias added: GHSA-m9x8-m34x-fj9q
  3. 2026-10-06 Fix available: RHSA-2026:74384 · Red Hat
  4. 2026-10-06 Fix available: RHSA-2026:74430 · Red Hat
  5. 2026-10-06 Fix available: RHSA-2026:74429 · Red Hat
  6. 2026-10-06 Fix available: RHSA-2026:74383 · Red Hat
  7. 2026-10-06 Affected versions changed · Red Hat
  8. 2026-10-07 Fix available: RHSA-2026:73987 · Red Hat
  9. 2026-10-07 Fix available: RHSA-2026:74381 · Red Hat
  10. 2026-10-07 Affected versions changed · Red Hat
  11. 2026-10-09 Affected versions changed · Red Hat
  12. 2026-10-10 Affected versions changed · Red Hat
  13. 2026-10-13 Affected versions changed · Red Hat
  14. 2026-10-13 Fix available: RHSA-2026:79320 · Red Hat
  15. 2026-10-14 Fix available: RHSA-2026:82304 · Red Hat
  16. 2026-10-14 Fix available: RHSA-2026:82322 · Red Hat
  17. 2026-10-14 Fix available: RHSA-2026:82354 · Red Hat
  18. 2026-10-15 Fix available: RHSA-2026:83013 · Red Hat
  19. 2026-10-16 Fix available: Cert Manager support for Red Hat OpenShift release 1.17, Cert Manager support for Red Hat OpenShift release 1.18, Logging Subsystem for Red Hat OpenShift 6.0 · Red Hat
  20. 2026-10-18 Affected versions changed · Red Hat
  21. 2026-10-20 Fix available: RHSA-2026:84734 · Red Hat
  22. 2026-10-20 Fix available: RHSA-2026:83702 · Red Hat
  23. 2026-10-20 Affected versions changed · Red Hat
  24. 2026-10-22 Fix available: RHSA-2026:87410 · Red Hat
  25. 2026-10-23 Fix available: Red Hat Advanced Cluster Security for Kubernetes for IBM Z and LinuxONE 4.11 · Red Hat
  26. 2026-10-25 Fix available: Red Hat OpenShift Builds 1.8.3 · Red Hat
  27. 2026-10-27 Fix available: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) +1 · Red Hat
  28. 2026-10-29 Fix available: RHSA-2026:90493 · Red Hat
  29. 2026-10-29 Fix available: RHSA-2026:90363 · Red Hat
  30. 2026-10-30 Fix available: RHSA-2026:91248 · Red Hat
  31. 2026-10-30 Fix available: RHSA-2026:91249 · Red Hat
  32. 2026-10-30 Fix available: RHSA-2026:92510 · Red Hat
  33. 2026-10-30 Fix available: Red Hat OpenShift AI 3.5 · Red Hat
  34. 2026-10-30 Affected versions changed · Red Hat
  35. 2026-10-31 Fix available: Red Hat Advanced Cluster Security for Kubernetes 4.11 · Red Hat
  36. 2026-11-03 Affected versions changed · Red Hat
  37. 2026-11-06 Fix available: OpenShift Compliance Operator 1 · Red Hat
  38. 2026-11-06 Fix available: RHSA-2026:95612 · Red Hat
  39. 2026-11-06 Fix available: RHSA-2026:42644 · Red Hat

References

Advisory 1

Other 3

  • TI-2026-28703 Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna CVSS 3.1CRITICAL 9.6
  • TI-2018-12685 The html package (aka x/net/html) through 2018-09-25 in Go mishandles… CVSS 3.1HIGH 7.5
  • TI-2018-12250 The html package (aka x/net/html) through 2018-09-17 in Go mishandles… CVSS 3.1HIGH 7.5
  • TI-2018-12206 The html package (aka x/net/html) before 2018-07-13 in Go mishandles "in frameset"… CVSS 3.1HIGH 7.5
  • TI-2018-12687 The html package (aka x/net/html) through 2018-09-25 in Go mishandles… CVSS 3.1HIGH 7.5
  • TI-2018-12686 The html package (aka x/net/html) through 2018-09-25 in Go mishandles… CVSS 3.1HIGH 7.5
See all 11 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences