RHSA-2026:48699
Vulnerability from csaf_redhat - Published: 2026-08-05 07:07 - Updated: 2026-08-06 06:30Summary
Red Hat Security Advisory: OpenShift Container Platform 4.18.51 bug fix and security update
Severity
Critical
Notes
Topic: Red Hat OpenShift Container Platform release 4.18.51 is now available with updates to packages and images that fix several bugs and add enhancements.
This release includes a security update for Red Hat OpenShift Container Platform 4.18.
Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container Platform 4.18.51. See the following advisory for the RPM packages for this release:
https://access.redhat.com/errata/RHBA-2026:48696
Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:417a162d360d2da6bb1aec58f44a3400482fcaa9c535929e62676c1834524ead_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:44230e060120cd247e24f22e21b03423ac13b4f41f6eb081172f9be06f25c584_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:68d192c8b0b1fe78c82e9640cb734ac14b2321a8c710f88ac06bb87892fb2313_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:f18eef7c2dd973425a667f993bd8c3ed5b06acf098276d56d4840da210b11b2e_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:0866eb3d44068199d2511abb8d1ca782dd61dd66b13a6d0b72dbc727c2331ded_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:14580d43056d87cf84a2ce5f2fc7fa5ad3dd47745e53f431bff1203db20a7b77_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:5ee44d986d12f117a4b78bdef0e015e9dea12e8d80a6d981c38934cf7587a36b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:65ee346de74922a3d3a15d8fdda96809bfdc7fedb332fd3be6b2bf7f0471e622_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:481789c068fba9b6bd657a2e193b33d6c4fb5c6cff0d0f63a7e55986e56d0eba_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:7414e957f7abbccb77a45b4bddcfc22b3b6d72077cc995226bc8874d5ae299f0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:a9df2055d0d970ba40f5b2ed3cbf8a8418b60090fed5858a6cbce116e70917ae_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:e2033ab2cd2e3f98576c6cfea20297829adf40d3f7f50b6eac1a1a66e3295f4c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:19806d3ba170fa6a9aaaf83b1c25dde1d20e7a07061dc04e931b37ce81996e3a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:4ae0174eec7cff35f2ae0926d28975ad4d2f303c4c3259fc5e2b9deea91699ad_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:5438bb301dc7d71c1fc945bcfb0e966e0a96d38fc0a6ddb0fd40da43aa4a7282_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ef993089bcd3530c78589e14a11b8214bc98d444553156b59ea1fb2395550f6b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:0d1c736eb20d065e6c48a12902c87396f8babdea65207a838301dad0937c7e2e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:303de185a374a7d3a22eec6d10e1c8a178f68a33d0573b195fa8d9b40d67becc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:84153090a97f4d2fd7c9136a40cf98d5bbc86acf9ae978d8ae17a731284d5aaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:cdea7b9a3878b0f1b087fc19587e91f6c35a1325e09efe411985f35c7af7a3d4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:3df178f2cdc1b46a0fb728b1ce65689052c1728cfacadd4ad95383017a625202_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:6b500dcb1d4dd390820c45b6c53cf5edc822e49dacd525fb4530ce904c09d8f1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:683cd49dfc9a43c876db6cf94b9f7e417cee3f7bc0adbd320aa0cb924b817732_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:9a59698fa26507d2dac42c9d5add511fcb224a25bbc2b8d6c24f443ee8c28410_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:1833524376750ff3cf91d4e95eb6670180428c4d936520002a6cf27ecde777f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:57686feccedbbb655b36d5231aa69f47b0d77ff9c04203bb78218feb0367585e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:749150b69ff000b5f45a5c169ef58c2c67541f1f5caba7539a2e8e133abb122c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:a3085627a26e2e6c6be38a3a6757523da4da6130a8517e6fc37076df6ee101f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:134def2853a731f3d51183c2efbd3d475cf64156dd3fec97cf84a2ff46f3297e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:32455bd12de20c48a129c30001ee8dadb6583182df7797ee6ace06e3a4a09547_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:4873d888ea06945c205c5d1810c0ab733fb1ecfd09a7479a57bdfa79b0a817f3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:806df3b271c6ca7e964042117e47a09e6d8c6aa172b5413e6863381acc0b1202_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:0c0289461e7dc8ace658fee1c39f97e7718f563d903e103436da4359f8570b65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:33578de6f34f30567f0b7d3b5cda88e441026c02fa3a404876672fe586313f73_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:5baa44685b91e787650260630be8ba4a375b89075ac0c2044028ec66b9e9fe85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:d5e995a9e67601d5caca85a6279393e8a7535d06071c1cb8892c85f1ec9c6c7a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:1dcaf6f017f0cf1d06f5626490fec03a29101f94ff4e88e487a81c6c403b5533_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:384e092f3affff6a2e7bf4b5a2c288046c32175d5a4f032905d6a2fcaff800d1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a5a27f6ce4c81f82f91ef9b926e8ed134419357433ad84ba067483a518b572d2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a7f6a9f55ead1030ce6fbc0fd991e5d4f5f7642a73e86605486eef6637036e08_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:417a162d360d2da6bb1aec58f44a3400482fcaa9c535929e62676c1834524ead_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:44230e060120cd247e24f22e21b03423ac13b4f41f6eb081172f9be06f25c584_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:68d192c8b0b1fe78c82e9640cb734ac14b2321a8c710f88ac06bb87892fb2313_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:f18eef7c2dd973425a667f993bd8c3ed5b06acf098276d56d4840da210b11b2e_s390x | — |
Vendor Fix
fix
|
Known not affected
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:0866eb3d44068199d2511abb8d1ca782dd61dd66b13a6d0b72dbc727c2331ded_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:14580d43056d87cf84a2ce5f2fc7fa5ad3dd47745e53f431bff1203db20a7b77_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:5ee44d986d12f117a4b78bdef0e015e9dea12e8d80a6d981c38934cf7587a36b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:65ee346de74922a3d3a15d8fdda96809bfdc7fedb332fd3be6b2bf7f0471e622_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:481789c068fba9b6bd657a2e193b33d6c4fb5c6cff0d0f63a7e55986e56d0eba_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:7414e957f7abbccb77a45b4bddcfc22b3b6d72077cc995226bc8874d5ae299f0_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:a9df2055d0d970ba40f5b2ed3cbf8a8418b60090fed5858a6cbce116e70917ae_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:e2033ab2cd2e3f98576c6cfea20297829adf40d3f7f50b6eac1a1a66e3295f4c_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:19806d3ba170fa6a9aaaf83b1c25dde1d20e7a07061dc04e931b37ce81996e3a_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:4ae0174eec7cff35f2ae0926d28975ad4d2f303c4c3259fc5e2b9deea91699ad_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:5438bb301dc7d71c1fc945bcfb0e966e0a96d38fc0a6ddb0fd40da43aa4a7282_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ef993089bcd3530c78589e14a11b8214bc98d444553156b59ea1fb2395550f6b_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:0d1c736eb20d065e6c48a12902c87396f8babdea65207a838301dad0937c7e2e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:303de185a374a7d3a22eec6d10e1c8a178f68a33d0573b195fa8d9b40d67becc_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:84153090a97f4d2fd7c9136a40cf98d5bbc86acf9ae978d8ae17a731284d5aaf_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:cdea7b9a3878b0f1b087fc19587e91f6c35a1325e09efe411985f35c7af7a3d4_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:3df178f2cdc1b46a0fb728b1ce65689052c1728cfacadd4ad95383017a625202_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:6b500dcb1d4dd390820c45b6c53cf5edc822e49dacd525fb4530ce904c09d8f1_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:683cd49dfc9a43c876db6cf94b9f7e417cee3f7bc0adbd320aa0cb924b817732_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:9a59698fa26507d2dac42c9d5add511fcb224a25bbc2b8d6c24f443ee8c28410_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:1833524376750ff3cf91d4e95eb6670180428c4d936520002a6cf27ecde777f1_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:57686feccedbbb655b36d5231aa69f47b0d77ff9c04203bb78218feb0367585e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:749150b69ff000b5f45a5c169ef58c2c67541f1f5caba7539a2e8e133abb122c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:a3085627a26e2e6c6be38a3a6757523da4da6130a8517e6fc37076df6ee101f7_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:134def2853a731f3d51183c2efbd3d475cf64156dd3fec97cf84a2ff46f3297e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:32455bd12de20c48a129c30001ee8dadb6583182df7797ee6ace06e3a4a09547_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:4873d888ea06945c205c5d1810c0ab733fb1ecfd09a7479a57bdfa79b0a817f3_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:806df3b271c6ca7e964042117e47a09e6d8c6aa172b5413e6863381acc0b1202_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:0c0289461e7dc8ace658fee1c39f97e7718f563d903e103436da4359f8570b65_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:33578de6f34f30567f0b7d3b5cda88e441026c02fa3a404876672fe586313f73_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:5baa44685b91e787650260630be8ba4a375b89075ac0c2044028ec66b9e9fe85_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:d5e995a9e67601d5caca85a6279393e8a7535d06071c1cb8892c85f1ec9c6c7a_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:1dcaf6f017f0cf1d06f5626490fec03a29101f94ff4e88e487a81c6c403b5533_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:384e092f3affff6a2e7bf4b5a2c288046c32175d5a4f032905d6a2fcaff800d1_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a5a27f6ce4c81f82f91ef9b926e8ed134419357433ad84ba067483a518b572d2_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a7f6a9f55ead1030ce6fbc0fd991e5d4f5f7642a73e86605486eef6637036e08_s390x | — |
Threats
Impact
Important
A flaw was found in the Konnectivity proxy-server configuration for hosted control planes. The agent-facing listener was started without --cluster-ca-cert (and without token-based agent authentication), so client certificates were not validated. A remote attacker who can reach the Konnectivity cluster endpoint could connect as an unauthenticated agent, join the routing pool, and potentially proxy, inspect, modify, or drop control-plane-to-node traffic.
9.4 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:0d1c736eb20d065e6c48a12902c87396f8babdea65207a838301dad0937c7e2e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:303de185a374a7d3a22eec6d10e1c8a178f68a33d0573b195fa8d9b40d67becc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:84153090a97f4d2fd7c9136a40cf98d5bbc86acf9ae978d8ae17a731284d5aaf_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:cdea7b9a3878b0f1b087fc19587e91f6c35a1325e09efe411985f35c7af7a3d4_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:0866eb3d44068199d2511abb8d1ca782dd61dd66b13a6d0b72dbc727c2331ded_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:14580d43056d87cf84a2ce5f2fc7fa5ad3dd47745e53f431bff1203db20a7b77_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:5ee44d986d12f117a4b78bdef0e015e9dea12e8d80a6d981c38934cf7587a36b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:65ee346de74922a3d3a15d8fdda96809bfdc7fedb332fd3be6b2bf7f0471e622_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:481789c068fba9b6bd657a2e193b33d6c4fb5c6cff0d0f63a7e55986e56d0eba_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:7414e957f7abbccb77a45b4bddcfc22b3b6d72077cc995226bc8874d5ae299f0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:a9df2055d0d970ba40f5b2ed3cbf8a8418b60090fed5858a6cbce116e70917ae_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:e2033ab2cd2e3f98576c6cfea20297829adf40d3f7f50b6eac1a1a66e3295f4c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:19806d3ba170fa6a9aaaf83b1c25dde1d20e7a07061dc04e931b37ce81996e3a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:4ae0174eec7cff35f2ae0926d28975ad4d2f303c4c3259fc5e2b9deea91699ad_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:5438bb301dc7d71c1fc945bcfb0e966e0a96d38fc0a6ddb0fd40da43aa4a7282_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ef993089bcd3530c78589e14a11b8214bc98d444553156b59ea1fb2395550f6b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:417a162d360d2da6bb1aec58f44a3400482fcaa9c535929e62676c1834524ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:44230e060120cd247e24f22e21b03423ac13b4f41f6eb081172f9be06f25c584_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:68d192c8b0b1fe78c82e9640cb734ac14b2321a8c710f88ac06bb87892fb2313_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:f18eef7c2dd973425a667f993bd8c3ed5b06acf098276d56d4840da210b11b2e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:3df178f2cdc1b46a0fb728b1ce65689052c1728cfacadd4ad95383017a625202_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:6b500dcb1d4dd390820c45b6c53cf5edc822e49dacd525fb4530ce904c09d8f1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:683cd49dfc9a43c876db6cf94b9f7e417cee3f7bc0adbd320aa0cb924b817732_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:9a59698fa26507d2dac42c9d5add511fcb224a25bbc2b8d6c24f443ee8c28410_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:1833524376750ff3cf91d4e95eb6670180428c4d936520002a6cf27ecde777f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:57686feccedbbb655b36d5231aa69f47b0d77ff9c04203bb78218feb0367585e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:749150b69ff000b5f45a5c169ef58c2c67541f1f5caba7539a2e8e133abb122c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:a3085627a26e2e6c6be38a3a6757523da4da6130a8517e6fc37076df6ee101f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:134def2853a731f3d51183c2efbd3d475cf64156dd3fec97cf84a2ff46f3297e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:32455bd12de20c48a129c30001ee8dadb6583182df7797ee6ace06e3a4a09547_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:4873d888ea06945c205c5d1810c0ab733fb1ecfd09a7479a57bdfa79b0a817f3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:806df3b271c6ca7e964042117e47a09e6d8c6aa172b5413e6863381acc0b1202_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:0c0289461e7dc8ace658fee1c39f97e7718f563d903e103436da4359f8570b65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:33578de6f34f30567f0b7d3b5cda88e441026c02fa3a404876672fe586313f73_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:5baa44685b91e787650260630be8ba4a375b89075ac0c2044028ec66b9e9fe85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:d5e995a9e67601d5caca85a6279393e8a7535d06071c1cb8892c85f1ec9c6c7a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:1dcaf6f017f0cf1d06f5626490fec03a29101f94ff4e88e487a81c6c403b5533_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:384e092f3affff6a2e7bf4b5a2c288046c32175d5a4f032905d6a2fcaff800d1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a5a27f6ce4c81f82f91ef9b926e8ed134419357433ad84ba067483a518b572d2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a7f6a9f55ead1030ce6fbc0fd991e5d4f5f7642a73e86605486eef6637036e08_s390x | — |
Workaround
|
Threats
Impact
Critical
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:481789c068fba9b6bd657a2e193b33d6c4fb5c6cff0d0f63a7e55986e56d0eba_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:7414e957f7abbccb77a45b4bddcfc22b3b6d72077cc995226bc8874d5ae299f0_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:a9df2055d0d970ba40f5b2ed3cbf8a8418b60090fed5858a6cbce116e70917ae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:e2033ab2cd2e3f98576c6cfea20297829adf40d3f7f50b6eac1a1a66e3295f4c_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:0866eb3d44068199d2511abb8d1ca782dd61dd66b13a6d0b72dbc727c2331ded_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:14580d43056d87cf84a2ce5f2fc7fa5ad3dd47745e53f431bff1203db20a7b77_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:5ee44d986d12f117a4b78bdef0e015e9dea12e8d80a6d981c38934cf7587a36b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:65ee346de74922a3d3a15d8fdda96809bfdc7fedb332fd3be6b2bf7f0471e622_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:19806d3ba170fa6a9aaaf83b1c25dde1d20e7a07061dc04e931b37ce81996e3a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:4ae0174eec7cff35f2ae0926d28975ad4d2f303c4c3259fc5e2b9deea91699ad_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:5438bb301dc7d71c1fc945bcfb0e966e0a96d38fc0a6ddb0fd40da43aa4a7282_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ef993089bcd3530c78589e14a11b8214bc98d444553156b59ea1fb2395550f6b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:417a162d360d2da6bb1aec58f44a3400482fcaa9c535929e62676c1834524ead_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:44230e060120cd247e24f22e21b03423ac13b4f41f6eb081172f9be06f25c584_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:68d192c8b0b1fe78c82e9640cb734ac14b2321a8c710f88ac06bb87892fb2313_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:f18eef7c2dd973425a667f993bd8c3ed5b06acf098276d56d4840da210b11b2e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:0d1c736eb20d065e6c48a12902c87396f8babdea65207a838301dad0937c7e2e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:303de185a374a7d3a22eec6d10e1c8a178f68a33d0573b195fa8d9b40d67becc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:84153090a97f4d2fd7c9136a40cf98d5bbc86acf9ae978d8ae17a731284d5aaf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:cdea7b9a3878b0f1b087fc19587e91f6c35a1325e09efe411985f35c7af7a3d4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:3df178f2cdc1b46a0fb728b1ce65689052c1728cfacadd4ad95383017a625202_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:6b500dcb1d4dd390820c45b6c53cf5edc822e49dacd525fb4530ce904c09d8f1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:683cd49dfc9a43c876db6cf94b9f7e417cee3f7bc0adbd320aa0cb924b817732_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:9a59698fa26507d2dac42c9d5add511fcb224a25bbc2b8d6c24f443ee8c28410_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:1833524376750ff3cf91d4e95eb6670180428c4d936520002a6cf27ecde777f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:57686feccedbbb655b36d5231aa69f47b0d77ff9c04203bb78218feb0367585e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:749150b69ff000b5f45a5c169ef58c2c67541f1f5caba7539a2e8e133abb122c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:a3085627a26e2e6c6be38a3a6757523da4da6130a8517e6fc37076df6ee101f7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:134def2853a731f3d51183c2efbd3d475cf64156dd3fec97cf84a2ff46f3297e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:32455bd12de20c48a129c30001ee8dadb6583182df7797ee6ace06e3a4a09547_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:4873d888ea06945c205c5d1810c0ab733fb1ecfd09a7479a57bdfa79b0a817f3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:806df3b271c6ca7e964042117e47a09e6d8c6aa172b5413e6863381acc0b1202_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:0c0289461e7dc8ace658fee1c39f97e7718f563d903e103436da4359f8570b65_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:33578de6f34f30567f0b7d3b5cda88e441026c02fa3a404876672fe586313f73_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:5baa44685b91e787650260630be8ba4a375b89075ac0c2044028ec66b9e9fe85_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:d5e995a9e67601d5caca85a6279393e8a7535d06071c1cb8892c85f1ec9c6c7a_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:1dcaf6f017f0cf1d06f5626490fec03a29101f94ff4e88e487a81c6c403b5533_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:384e092f3affff6a2e7bf4b5a2c288046c32175d5a4f032905d6a2fcaff800d1_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a5a27f6ce4c81f82f91ef9b926e8ed134419357433ad84ba067483a518b572d2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a7f6a9f55ead1030ce6fbc0fd991e5d4f5f7642a73e86605486eef6637036e08_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in follow-redirects. When an HTTP request follows a cross-domain redirect (a redirection to a different domain), custom authentication headers, such as X-API-Key or X-Auth-Token, are not properly stripped. This allows these sensitive headers to be forwarded verbatim to the redirect target, potentially leading to the unintended disclosure of authentication information to an untrusted third party.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:417a162d360d2da6bb1aec58f44a3400482fcaa9c535929e62676c1834524ead_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:44230e060120cd247e24f22e21b03423ac13b4f41f6eb081172f9be06f25c584_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:68d192c8b0b1fe78c82e9640cb734ac14b2321a8c710f88ac06bb87892fb2313_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:f18eef7c2dd973425a667f993bd8c3ed5b06acf098276d56d4840da210b11b2e_s390x | — |
Vendor Fix
fix
|
Known not affected
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:0866eb3d44068199d2511abb8d1ca782dd61dd66b13a6d0b72dbc727c2331ded_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:14580d43056d87cf84a2ce5f2fc7fa5ad3dd47745e53f431bff1203db20a7b77_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:5ee44d986d12f117a4b78bdef0e015e9dea12e8d80a6d981c38934cf7587a36b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:65ee346de74922a3d3a15d8fdda96809bfdc7fedb332fd3be6b2bf7f0471e622_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:481789c068fba9b6bd657a2e193b33d6c4fb5c6cff0d0f63a7e55986e56d0eba_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:7414e957f7abbccb77a45b4bddcfc22b3b6d72077cc995226bc8874d5ae299f0_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:a9df2055d0d970ba40f5b2ed3cbf8a8418b60090fed5858a6cbce116e70917ae_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:e2033ab2cd2e3f98576c6cfea20297829adf40d3f7f50b6eac1a1a66e3295f4c_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:19806d3ba170fa6a9aaaf83b1c25dde1d20e7a07061dc04e931b37ce81996e3a_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:4ae0174eec7cff35f2ae0926d28975ad4d2f303c4c3259fc5e2b9deea91699ad_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:5438bb301dc7d71c1fc945bcfb0e966e0a96d38fc0a6ddb0fd40da43aa4a7282_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ef993089bcd3530c78589e14a11b8214bc98d444553156b59ea1fb2395550f6b_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:0d1c736eb20d065e6c48a12902c87396f8babdea65207a838301dad0937c7e2e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:303de185a374a7d3a22eec6d10e1c8a178f68a33d0573b195fa8d9b40d67becc_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:84153090a97f4d2fd7c9136a40cf98d5bbc86acf9ae978d8ae17a731284d5aaf_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:cdea7b9a3878b0f1b087fc19587e91f6c35a1325e09efe411985f35c7af7a3d4_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:3df178f2cdc1b46a0fb728b1ce65689052c1728cfacadd4ad95383017a625202_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:6b500dcb1d4dd390820c45b6c53cf5edc822e49dacd525fb4530ce904c09d8f1_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:683cd49dfc9a43c876db6cf94b9f7e417cee3f7bc0adbd320aa0cb924b817732_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:9a59698fa26507d2dac42c9d5add511fcb224a25bbc2b8d6c24f443ee8c28410_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:1833524376750ff3cf91d4e95eb6670180428c4d936520002a6cf27ecde777f1_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:57686feccedbbb655b36d5231aa69f47b0d77ff9c04203bb78218feb0367585e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:749150b69ff000b5f45a5c169ef58c2c67541f1f5caba7539a2e8e133abb122c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:a3085627a26e2e6c6be38a3a6757523da4da6130a8517e6fc37076df6ee101f7_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:134def2853a731f3d51183c2efbd3d475cf64156dd3fec97cf84a2ff46f3297e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:32455bd12de20c48a129c30001ee8dadb6583182df7797ee6ace06e3a4a09547_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:4873d888ea06945c205c5d1810c0ab733fb1ecfd09a7479a57bdfa79b0a817f3_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:806df3b271c6ca7e964042117e47a09e6d8c6aa172b5413e6863381acc0b1202_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:0c0289461e7dc8ace658fee1c39f97e7718f563d903e103436da4359f8570b65_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:33578de6f34f30567f0b7d3b5cda88e441026c02fa3a404876672fe586313f73_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:5baa44685b91e787650260630be8ba4a375b89075ac0c2044028ec66b9e9fe85_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:d5e995a9e67601d5caca85a6279393e8a7535d06071c1cb8892c85f1ec9c6c7a_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:1dcaf6f017f0cf1d06f5626490fec03a29101f94ff4e88e487a81c6c403b5533_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:384e092f3affff6a2e7bf4b5a2c288046c32175d5a4f032905d6a2fcaff800d1_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a5a27f6ce4c81f82f91ef9b926e8ed134419357433ad84ba067483a518b572d2_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a7f6a9f55ead1030ce6fbc0fd991e5d4f5f7642a73e86605486eef6637036e08_s390x | — |
Threats
Impact
Important
A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:1dcaf6f017f0cf1d06f5626490fec03a29101f94ff4e88e487a81c6c403b5533_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:384e092f3affff6a2e7bf4b5a2c288046c32175d5a4f032905d6a2fcaff800d1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a5a27f6ce4c81f82f91ef9b926e8ed134419357433ad84ba067483a518b572d2_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a7f6a9f55ead1030ce6fbc0fd991e5d4f5f7642a73e86605486eef6637036e08_s390x | — |
Vendor Fix
fix
|
Known not affected
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:0866eb3d44068199d2511abb8d1ca782dd61dd66b13a6d0b72dbc727c2331ded_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:14580d43056d87cf84a2ce5f2fc7fa5ad3dd47745e53f431bff1203db20a7b77_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:5ee44d986d12f117a4b78bdef0e015e9dea12e8d80a6d981c38934cf7587a36b_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:65ee346de74922a3d3a15d8fdda96809bfdc7fedb332fd3be6b2bf7f0471e622_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:481789c068fba9b6bd657a2e193b33d6c4fb5c6cff0d0f63a7e55986e56d0eba_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:7414e957f7abbccb77a45b4bddcfc22b3b6d72077cc995226bc8874d5ae299f0_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:a9df2055d0d970ba40f5b2ed3cbf8a8418b60090fed5858a6cbce116e70917ae_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:e2033ab2cd2e3f98576c6cfea20297829adf40d3f7f50b6eac1a1a66e3295f4c_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:19806d3ba170fa6a9aaaf83b1c25dde1d20e7a07061dc04e931b37ce81996e3a_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:4ae0174eec7cff35f2ae0926d28975ad4d2f303c4c3259fc5e2b9deea91699ad_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:5438bb301dc7d71c1fc945bcfb0e966e0a96d38fc0a6ddb0fd40da43aa4a7282_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ef993089bcd3530c78589e14a11b8214bc98d444553156b59ea1fb2395550f6b_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:417a162d360d2da6bb1aec58f44a3400482fcaa9c535929e62676c1834524ead_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:44230e060120cd247e24f22e21b03423ac13b4f41f6eb081172f9be06f25c584_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:68d192c8b0b1fe78c82e9640cb734ac14b2321a8c710f88ac06bb87892fb2313_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:f18eef7c2dd973425a667f993bd8c3ed5b06acf098276d56d4840da210b11b2e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:0d1c736eb20d065e6c48a12902c87396f8babdea65207a838301dad0937c7e2e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:303de185a374a7d3a22eec6d10e1c8a178f68a33d0573b195fa8d9b40d67becc_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:84153090a97f4d2fd7c9136a40cf98d5bbc86acf9ae978d8ae17a731284d5aaf_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:cdea7b9a3878b0f1b087fc19587e91f6c35a1325e09efe411985f35c7af7a3d4_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:3df178f2cdc1b46a0fb728b1ce65689052c1728cfacadd4ad95383017a625202_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:6b500dcb1d4dd390820c45b6c53cf5edc822e49dacd525fb4530ce904c09d8f1_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:683cd49dfc9a43c876db6cf94b9f7e417cee3f7bc0adbd320aa0cb924b817732_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:9a59698fa26507d2dac42c9d5add511fcb224a25bbc2b8d6c24f443ee8c28410_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:1833524376750ff3cf91d4e95eb6670180428c4d936520002a6cf27ecde777f1_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:57686feccedbbb655b36d5231aa69f47b0d77ff9c04203bb78218feb0367585e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:749150b69ff000b5f45a5c169ef58c2c67541f1f5caba7539a2e8e133abb122c_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:a3085627a26e2e6c6be38a3a6757523da4da6130a8517e6fc37076df6ee101f7_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:134def2853a731f3d51183c2efbd3d475cf64156dd3fec97cf84a2ff46f3297e_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:32455bd12de20c48a129c30001ee8dadb6583182df7797ee6ace06e3a4a09547_arm64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:4873d888ea06945c205c5d1810c0ab733fb1ecfd09a7479a57bdfa79b0a817f3_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:806df3b271c6ca7e964042117e47a09e6d8c6aa172b5413e6863381acc0b1202_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:0c0289461e7dc8ace658fee1c39f97e7718f563d903e103436da4359f8570b65_amd64 | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:33578de6f34f30567f0b7d3b5cda88e441026c02fa3a404876672fe586313f73_ppc64le | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:5baa44685b91e787650260630be8ba4a375b89075ac0c2044028ec66b9e9fe85_s390x | — | ||
| Unresolved product id: Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:d5e995a9e67601d5caca85a6279393e8a7535d06071c1cb8892c85f1ec9c6c7a_arm64 | — |
Threats
Impact
Important
References
48 references
Acknowledgments
Microsoft
Microsoft Security Research (MSRC)
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Container Platform release 4.18.51 is now available with updates to packages and images that fix several bugs and add enhancements.\n\n This release includes a security update for Red Hat OpenShift Container Platform 4.18.\n\nRed Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.\n\nThis advisory contains the container images for Red Hat OpenShift Container Platform 4.18.51. See the following advisory for the RPM packages for this release:\n\nhttps://access.redhat.com/errata/RHBA-2026:48696\n\nSpace precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:48699",
"url": "https://access.redhat.com/errata/RHSA-2026:48699"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-16242",
"url": "https://access.redhat.com/security/cve/CVE-2026-16242"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40895",
"url": "https://access.redhat.com/security/cve/CVE-2026-40895"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42154",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4800",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-9277",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_48699.json"
}
],
"title": "Red Hat Security Advisory: OpenShift Container Platform 4.18.51 bug fix and security update",
"tracking": {
"current_release_date": "2026-08-06T06:30:42+00:00",
"generator": {
"date": "2026-08-06T06:30:42+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.12"
}
},
"id": "RHSA-2026:48699",
"initial_release_date": "2026-08-05T07:07:38+00:00",
"revision_history": [
{
"date": "2026-08-05T07:07:38+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-05T07:09:36+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-06T06:30:42+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Container Platform 4.18",
"product": {
"name": "Red Hat OpenShift Container Platform 4.18",
"product_id": "Red Hat OpenShift Container Platform 4.18",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:4.18::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Container Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:4ae0174eec7cff35f2ae0926d28975ad4d2f303c4c3259fc5e2b9deea91699ad_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:4ae0174eec7cff35f2ae0926d28975ad4d2f303c4c3259fc5e2b9deea91699ad_amd64",
"product_id": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:4ae0174eec7cff35f2ae0926d28975ad4d2f303c4c3259fc5e2b9deea91699ad_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cluster-node-tuning-rhel9-operator@sha256%3A4ae0174eec7cff35f2ae0926d28975ad4d2f303c4c3259fc5e2b9deea91699ad?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator\u0026tag=1785360066"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:14580d43056d87cf84a2ce5f2fc7fa5ad3dd47745e53f431bff1203db20a7b77_amd64",
"product": {
"name": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:14580d43056d87cf84a2ce5f2fc7fa5ad3dd47745e53f431bff1203db20a7b77_amd64",
"product_id": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:14580d43056d87cf84a2ce5f2fc7fa5ad3dd47745e53f431bff1203db20a7b77_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/driver-toolkit-rhel9@sha256%3A14580d43056d87cf84a2ce5f2fc7fa5ad3dd47745e53f431bff1203db20a7b77?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/driver-toolkit-rhel9\u0026tag=1785360224"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:0c0289461e7dc8ace658fee1c39f97e7718f563d903e103436da4359f8570b65_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:0c0289461e7dc8ace658fee1c39f97e7718f563d903e103436da4359f8570b65_amd64",
"product_id": "registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:0c0289461e7dc8ace658fee1c39f97e7718f563d903e103436da4359f8570b65_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-oauth-proxy-rhel9@sha256%3A0c0289461e7dc8ace658fee1c39f97e7718f563d903e103436da4359f8570b65?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-oauth-proxy-rhel9\u0026tag=1785247738"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:384e092f3affff6a2e7bf4b5a2c288046c32175d5a4f032905d6a2fcaff800d1_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:384e092f3affff6a2e7bf4b5a2c288046c32175d5a4f032905d6a2fcaff800d1_amd64",
"product_id": "registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:384e092f3affff6a2e7bf4b5a2c288046c32175d5a4f032905d6a2fcaff800d1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-prometheus-rhel9@sha256%3A384e092f3affff6a2e7bf4b5a2c288046c32175d5a4f032905d6a2fcaff800d1?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-prometheus-rhel9\u0026tag=1785360067"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:84153090a97f4d2fd7c9136a40cf98d5bbc86acf9ae978d8ae17a731284d5aaf_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:84153090a97f4d2fd7c9136a40cf98d5bbc86acf9ae978d8ae17a731284d5aaf_amd64",
"product_id": "registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:84153090a97f4d2fd7c9136a40cf98d5bbc86acf9ae978d8ae17a731284d5aaf_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-hypershift-rhel9@sha256%3A84153090a97f4d2fd7c9136a40cf98d5bbc86acf9ae978d8ae17a731284d5aaf?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-hypershift-rhel9\u0026tag=1784912882"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:683cd49dfc9a43c876db6cf94b9f7e417cee3f7bc0adbd320aa0cb924b817732_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:683cd49dfc9a43c876db6cf94b9f7e417cee3f7bc0adbd320aa0cb924b817732_amd64",
"product_id": "registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:683cd49dfc9a43c876db6cf94b9f7e417cee3f7bc0adbd320aa0cb924b817732_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-ironic-rhel9@sha256%3A683cd49dfc9a43c876db6cf94b9f7e417cee3f7bc0adbd320aa0cb924b817732?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-ironic-rhel9\u0026tag=1785185273"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:3df178f2cdc1b46a0fb728b1ce65689052c1728cfacadd4ad95383017a625202_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:3df178f2cdc1b46a0fb728b1ce65689052c1728cfacadd4ad95383017a625202_amd64",
"product_id": "registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:3df178f2cdc1b46a0fb728b1ce65689052c1728cfacadd4ad95383017a625202_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-ironic-machine-os-downloader-rhel9@sha256%3A3df178f2cdc1b46a0fb728b1ce65689052c1728cfacadd4ad95383017a625202?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9\u0026tag=1785185425"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:4873d888ea06945c205c5d1810c0ab733fb1ecfd09a7479a57bdfa79b0a817f3_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:4873d888ea06945c205c5d1810c0ab733fb1ecfd09a7479a57bdfa79b0a817f3_amd64",
"product_id": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:4873d888ea06945c205c5d1810c0ab733fb1ecfd09a7479a57bdfa79b0a817f3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-monitoring-plugin-rhel9@sha256%3A4873d888ea06945c205c5d1810c0ab733fb1ecfd09a7479a57bdfa79b0a817f3?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9\u0026tag=1784718799"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:44230e060120cd247e24f22e21b03423ac13b4f41f6eb081172f9be06f25c584_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:44230e060120cd247e24f22e21b03423ac13b4f41f6eb081172f9be06f25c584_amd64",
"product_id": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:44230e060120cd247e24f22e21b03423ac13b4f41f6eb081172f9be06f25c584_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-console-rhel9@sha256%3A44230e060120cd247e24f22e21b03423ac13b4f41f6eb081172f9be06f25c584?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-console-rhel9\u0026tag=1785278569"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:481789c068fba9b6bd657a2e193b33d6c4fb5c6cff0d0f63a7e55986e56d0eba_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:481789c068fba9b6bd657a2e193b33d6c4fb5c6cff0d0f63a7e55986e56d0eba_amd64",
"product_id": "registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:481789c068fba9b6bd657a2e193b33d6c4fb5c6cff0d0f63a7e55986e56d0eba_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cloud-credential-rhel9-operator@sha256%3A481789c068fba9b6bd657a2e193b33d6c4fb5c6cff0d0f63a7e55986e56d0eba?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator\u0026tag=1784839166"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:1833524376750ff3cf91d4e95eb6670180428c4d936520002a6cf27ecde777f1_amd64",
"product": {
"name": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:1833524376750ff3cf91d4e95eb6670180428c4d936520002a6cf27ecde777f1_amd64",
"product_id": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:1833524376750ff3cf91d4e95eb6670180428c4d936520002a6cf27ecde777f1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-machine-config-rhel9-operator@sha256%3A1833524376750ff3cf91d4e95eb6670180428c4d936520002a6cf27ecde777f1?arch=amd64\u0026repository_url=registry.redhat.io/openshift4/ose-machine-config-rhel9-operator\u0026tag=1785348779"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:19806d3ba170fa6a9aaaf83b1c25dde1d20e7a07061dc04e931b37ce81996e3a_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:19806d3ba170fa6a9aaaf83b1c25dde1d20e7a07061dc04e931b37ce81996e3a_arm64",
"product_id": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:19806d3ba170fa6a9aaaf83b1c25dde1d20e7a07061dc04e931b37ce81996e3a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cluster-node-tuning-rhel9-operator@sha256%3A19806d3ba170fa6a9aaaf83b1c25dde1d20e7a07061dc04e931b37ce81996e3a?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator\u0026tag=1785360066"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:5ee44d986d12f117a4b78bdef0e015e9dea12e8d80a6d981c38934cf7587a36b_arm64",
"product": {
"name": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:5ee44d986d12f117a4b78bdef0e015e9dea12e8d80a6d981c38934cf7587a36b_arm64",
"product_id": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:5ee44d986d12f117a4b78bdef0e015e9dea12e8d80a6d981c38934cf7587a36b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/driver-toolkit-rhel9@sha256%3A5ee44d986d12f117a4b78bdef0e015e9dea12e8d80a6d981c38934cf7587a36b?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/driver-toolkit-rhel9\u0026tag=1785360224"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:d5e995a9e67601d5caca85a6279393e8a7535d06071c1cb8892c85f1ec9c6c7a_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:d5e995a9e67601d5caca85a6279393e8a7535d06071c1cb8892c85f1ec9c6c7a_arm64",
"product_id": "registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:d5e995a9e67601d5caca85a6279393e8a7535d06071c1cb8892c85f1ec9c6c7a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-oauth-proxy-rhel9@sha256%3Ad5e995a9e67601d5caca85a6279393e8a7535d06071c1cb8892c85f1ec9c6c7a?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-oauth-proxy-rhel9\u0026tag=1785247738"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a5a27f6ce4c81f82f91ef9b926e8ed134419357433ad84ba067483a518b572d2_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a5a27f6ce4c81f82f91ef9b926e8ed134419357433ad84ba067483a518b572d2_arm64",
"product_id": "registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a5a27f6ce4c81f82f91ef9b926e8ed134419357433ad84ba067483a518b572d2_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-prometheus-rhel9@sha256%3Aa5a27f6ce4c81f82f91ef9b926e8ed134419357433ad84ba067483a518b572d2?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-prometheus-rhel9\u0026tag=1785360067"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:cdea7b9a3878b0f1b087fc19587e91f6c35a1325e09efe411985f35c7af7a3d4_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:cdea7b9a3878b0f1b087fc19587e91f6c35a1325e09efe411985f35c7af7a3d4_arm64",
"product_id": "registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:cdea7b9a3878b0f1b087fc19587e91f6c35a1325e09efe411985f35c7af7a3d4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-hypershift-rhel9@sha256%3Acdea7b9a3878b0f1b087fc19587e91f6c35a1325e09efe411985f35c7af7a3d4?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-hypershift-rhel9\u0026tag=1784912882"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:9a59698fa26507d2dac42c9d5add511fcb224a25bbc2b8d6c24f443ee8c28410_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:9a59698fa26507d2dac42c9d5add511fcb224a25bbc2b8d6c24f443ee8c28410_arm64",
"product_id": "registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:9a59698fa26507d2dac42c9d5add511fcb224a25bbc2b8d6c24f443ee8c28410_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-ironic-rhel9@sha256%3A9a59698fa26507d2dac42c9d5add511fcb224a25bbc2b8d6c24f443ee8c28410?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-ironic-rhel9\u0026tag=1785185273"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:6b500dcb1d4dd390820c45b6c53cf5edc822e49dacd525fb4530ce904c09d8f1_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:6b500dcb1d4dd390820c45b6c53cf5edc822e49dacd525fb4530ce904c09d8f1_arm64",
"product_id": "registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:6b500dcb1d4dd390820c45b6c53cf5edc822e49dacd525fb4530ce904c09d8f1_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-ironic-machine-os-downloader-rhel9@sha256%3A6b500dcb1d4dd390820c45b6c53cf5edc822e49dacd525fb4530ce904c09d8f1?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9\u0026tag=1785185425"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:32455bd12de20c48a129c30001ee8dadb6583182df7797ee6ace06e3a4a09547_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:32455bd12de20c48a129c30001ee8dadb6583182df7797ee6ace06e3a4a09547_arm64",
"product_id": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:32455bd12de20c48a129c30001ee8dadb6583182df7797ee6ace06e3a4a09547_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-monitoring-plugin-rhel9@sha256%3A32455bd12de20c48a129c30001ee8dadb6583182df7797ee6ace06e3a4a09547?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9\u0026tag=1784718799"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:417a162d360d2da6bb1aec58f44a3400482fcaa9c535929e62676c1834524ead_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:417a162d360d2da6bb1aec58f44a3400482fcaa9c535929e62676c1834524ead_arm64",
"product_id": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:417a162d360d2da6bb1aec58f44a3400482fcaa9c535929e62676c1834524ead_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-console-rhel9@sha256%3A417a162d360d2da6bb1aec58f44a3400482fcaa9c535929e62676c1834524ead?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-console-rhel9\u0026tag=1785278569"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:7414e957f7abbccb77a45b4bddcfc22b3b6d72077cc995226bc8874d5ae299f0_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:7414e957f7abbccb77a45b4bddcfc22b3b6d72077cc995226bc8874d5ae299f0_arm64",
"product_id": "registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:7414e957f7abbccb77a45b4bddcfc22b3b6d72077cc995226bc8874d5ae299f0_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cloud-credential-rhel9-operator@sha256%3A7414e957f7abbccb77a45b4bddcfc22b3b6d72077cc995226bc8874d5ae299f0?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator\u0026tag=1784839166"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:749150b69ff000b5f45a5c169ef58c2c67541f1f5caba7539a2e8e133abb122c_arm64",
"product": {
"name": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:749150b69ff000b5f45a5c169ef58c2c67541f1f5caba7539a2e8e133abb122c_arm64",
"product_id": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:749150b69ff000b5f45a5c169ef58c2c67541f1f5caba7539a2e8e133abb122c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-machine-config-rhel9-operator@sha256%3A749150b69ff000b5f45a5c169ef58c2c67541f1f5caba7539a2e8e133abb122c?arch=arm64\u0026repository_url=registry.redhat.io/openshift4/ose-machine-config-rhel9-operator\u0026tag=1785348779"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:5438bb301dc7d71c1fc945bcfb0e966e0a96d38fc0a6ddb0fd40da43aa4a7282_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:5438bb301dc7d71c1fc945bcfb0e966e0a96d38fc0a6ddb0fd40da43aa4a7282_s390x",
"product_id": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:5438bb301dc7d71c1fc945bcfb0e966e0a96d38fc0a6ddb0fd40da43aa4a7282_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cluster-node-tuning-rhel9-operator@sha256%3A5438bb301dc7d71c1fc945bcfb0e966e0a96d38fc0a6ddb0fd40da43aa4a7282?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator\u0026tag=1785360066"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:0866eb3d44068199d2511abb8d1ca782dd61dd66b13a6d0b72dbc727c2331ded_s390x",
"product": {
"name": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:0866eb3d44068199d2511abb8d1ca782dd61dd66b13a6d0b72dbc727c2331ded_s390x",
"product_id": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:0866eb3d44068199d2511abb8d1ca782dd61dd66b13a6d0b72dbc727c2331ded_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/driver-toolkit-rhel9@sha256%3A0866eb3d44068199d2511abb8d1ca782dd61dd66b13a6d0b72dbc727c2331ded?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/driver-toolkit-rhel9\u0026tag=1785360224"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:5baa44685b91e787650260630be8ba4a375b89075ac0c2044028ec66b9e9fe85_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:5baa44685b91e787650260630be8ba4a375b89075ac0c2044028ec66b9e9fe85_s390x",
"product_id": "registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:5baa44685b91e787650260630be8ba4a375b89075ac0c2044028ec66b9e9fe85_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-oauth-proxy-rhel9@sha256%3A5baa44685b91e787650260630be8ba4a375b89075ac0c2044028ec66b9e9fe85?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-oauth-proxy-rhel9\u0026tag=1785247738"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a7f6a9f55ead1030ce6fbc0fd991e5d4f5f7642a73e86605486eef6637036e08_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a7f6a9f55ead1030ce6fbc0fd991e5d4f5f7642a73e86605486eef6637036e08_s390x",
"product_id": "registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a7f6a9f55ead1030ce6fbc0fd991e5d4f5f7642a73e86605486eef6637036e08_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-prometheus-rhel9@sha256%3Aa7f6a9f55ead1030ce6fbc0fd991e5d4f5f7642a73e86605486eef6637036e08?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-prometheus-rhel9\u0026tag=1785360067"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:0d1c736eb20d065e6c48a12902c87396f8babdea65207a838301dad0937c7e2e_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:0d1c736eb20d065e6c48a12902c87396f8babdea65207a838301dad0937c7e2e_s390x",
"product_id": "registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:0d1c736eb20d065e6c48a12902c87396f8babdea65207a838301dad0937c7e2e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-hypershift-rhel9@sha256%3A0d1c736eb20d065e6c48a12902c87396f8babdea65207a838301dad0937c7e2e?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-hypershift-rhel9\u0026tag=1784912882"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:134def2853a731f3d51183c2efbd3d475cf64156dd3fec97cf84a2ff46f3297e_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:134def2853a731f3d51183c2efbd3d475cf64156dd3fec97cf84a2ff46f3297e_s390x",
"product_id": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:134def2853a731f3d51183c2efbd3d475cf64156dd3fec97cf84a2ff46f3297e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-monitoring-plugin-rhel9@sha256%3A134def2853a731f3d51183c2efbd3d475cf64156dd3fec97cf84a2ff46f3297e?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9\u0026tag=1784718799"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:f18eef7c2dd973425a667f993bd8c3ed5b06acf098276d56d4840da210b11b2e_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:f18eef7c2dd973425a667f993bd8c3ed5b06acf098276d56d4840da210b11b2e_s390x",
"product_id": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:f18eef7c2dd973425a667f993bd8c3ed5b06acf098276d56d4840da210b11b2e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-console-rhel9@sha256%3Af18eef7c2dd973425a667f993bd8c3ed5b06acf098276d56d4840da210b11b2e?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-console-rhel9\u0026tag=1785278569"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:a9df2055d0d970ba40f5b2ed3cbf8a8418b60090fed5858a6cbce116e70917ae_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:a9df2055d0d970ba40f5b2ed3cbf8a8418b60090fed5858a6cbce116e70917ae_s390x",
"product_id": "registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:a9df2055d0d970ba40f5b2ed3cbf8a8418b60090fed5858a6cbce116e70917ae_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cloud-credential-rhel9-operator@sha256%3Aa9df2055d0d970ba40f5b2ed3cbf8a8418b60090fed5858a6cbce116e70917ae?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator\u0026tag=1784839166"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:57686feccedbbb655b36d5231aa69f47b0d77ff9c04203bb78218feb0367585e_s390x",
"product": {
"name": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:57686feccedbbb655b36d5231aa69f47b0d77ff9c04203bb78218feb0367585e_s390x",
"product_id": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:57686feccedbbb655b36d5231aa69f47b0d77ff9c04203bb78218feb0367585e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-machine-config-rhel9-operator@sha256%3A57686feccedbbb655b36d5231aa69f47b0d77ff9c04203bb78218feb0367585e?arch=s390x\u0026repository_url=registry.redhat.io/openshift4/ose-machine-config-rhel9-operator\u0026tag=1785348779"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ef993089bcd3530c78589e14a11b8214bc98d444553156b59ea1fb2395550f6b_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ef993089bcd3530c78589e14a11b8214bc98d444553156b59ea1fb2395550f6b_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ef993089bcd3530c78589e14a11b8214bc98d444553156b59ea1fb2395550f6b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cluster-node-tuning-rhel9-operator@sha256%3Aef993089bcd3530c78589e14a11b8214bc98d444553156b59ea1fb2395550f6b?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator\u0026tag=1785360066"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:65ee346de74922a3d3a15d8fdda96809bfdc7fedb332fd3be6b2bf7f0471e622_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:65ee346de74922a3d3a15d8fdda96809bfdc7fedb332fd3be6b2bf7f0471e622_ppc64le",
"product_id": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:65ee346de74922a3d3a15d8fdda96809bfdc7fedb332fd3be6b2bf7f0471e622_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/driver-toolkit-rhel9@sha256%3A65ee346de74922a3d3a15d8fdda96809bfdc7fedb332fd3be6b2bf7f0471e622?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/driver-toolkit-rhel9\u0026tag=1785360224"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:33578de6f34f30567f0b7d3b5cda88e441026c02fa3a404876672fe586313f73_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:33578de6f34f30567f0b7d3b5cda88e441026c02fa3a404876672fe586313f73_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:33578de6f34f30567f0b7d3b5cda88e441026c02fa3a404876672fe586313f73_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-oauth-proxy-rhel9@sha256%3A33578de6f34f30567f0b7d3b5cda88e441026c02fa3a404876672fe586313f73?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-oauth-proxy-rhel9\u0026tag=1785247738"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:1dcaf6f017f0cf1d06f5626490fec03a29101f94ff4e88e487a81c6c403b5533_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:1dcaf6f017f0cf1d06f5626490fec03a29101f94ff4e88e487a81c6c403b5533_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:1dcaf6f017f0cf1d06f5626490fec03a29101f94ff4e88e487a81c6c403b5533_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-prometheus-rhel9@sha256%3A1dcaf6f017f0cf1d06f5626490fec03a29101f94ff4e88e487a81c6c403b5533?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-prometheus-rhel9\u0026tag=1785360067"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:303de185a374a7d3a22eec6d10e1c8a178f68a33d0573b195fa8d9b40d67becc_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:303de185a374a7d3a22eec6d10e1c8a178f68a33d0573b195fa8d9b40d67becc_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:303de185a374a7d3a22eec6d10e1c8a178f68a33d0573b195fa8d9b40d67becc_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-hypershift-rhel9@sha256%3A303de185a374a7d3a22eec6d10e1c8a178f68a33d0573b195fa8d9b40d67becc?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-hypershift-rhel9\u0026tag=1784912882"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:806df3b271c6ca7e964042117e47a09e6d8c6aa172b5413e6863381acc0b1202_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:806df3b271c6ca7e964042117e47a09e6d8c6aa172b5413e6863381acc0b1202_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:806df3b271c6ca7e964042117e47a09e6d8c6aa172b5413e6863381acc0b1202_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-monitoring-plugin-rhel9@sha256%3A806df3b271c6ca7e964042117e47a09e6d8c6aa172b5413e6863381acc0b1202?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9\u0026tag=1784718799"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:68d192c8b0b1fe78c82e9640cb734ac14b2321a8c710f88ac06bb87892fb2313_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:68d192c8b0b1fe78c82e9640cb734ac14b2321a8c710f88ac06bb87892fb2313_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:68d192c8b0b1fe78c82e9640cb734ac14b2321a8c710f88ac06bb87892fb2313_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-console-rhel9@sha256%3A68d192c8b0b1fe78c82e9640cb734ac14b2321a8c710f88ac06bb87892fb2313?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-console-rhel9\u0026tag=1785278569"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:e2033ab2cd2e3f98576c6cfea20297829adf40d3f7f50b6eac1a1a66e3295f4c_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:e2033ab2cd2e3f98576c6cfea20297829adf40d3f7f50b6eac1a1a66e3295f4c_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:e2033ab2cd2e3f98576c6cfea20297829adf40d3f7f50b6eac1a1a66e3295f4c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-cloud-credential-rhel9-operator@sha256%3Ae2033ab2cd2e3f98576c6cfea20297829adf40d3f7f50b6eac1a1a66e3295f4c?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator\u0026tag=1784839166"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:a3085627a26e2e6c6be38a3a6757523da4da6130a8517e6fc37076df6ee101f7_ppc64le",
"product": {
"name": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:a3085627a26e2e6c6be38a3a6757523da4da6130a8517e6fc37076df6ee101f7_ppc64le",
"product_id": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:a3085627a26e2e6c6be38a3a6757523da4da6130a8517e6fc37076df6ee101f7_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/openshift/ose-machine-config-rhel9-operator@sha256%3Aa3085627a26e2e6c6be38a3a6757523da4da6130a8517e6fc37076df6ee101f7?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift4/ose-machine-config-rhel9-operator\u0026tag=1785348779"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:0866eb3d44068199d2511abb8d1ca782dd61dd66b13a6d0b72dbc727c2331ded_s390x as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:0866eb3d44068199d2511abb8d1ca782dd61dd66b13a6d0b72dbc727c2331ded_s390x"
},
"product_reference": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:0866eb3d44068199d2511abb8d1ca782dd61dd66b13a6d0b72dbc727c2331ded_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:14580d43056d87cf84a2ce5f2fc7fa5ad3dd47745e53f431bff1203db20a7b77_amd64 as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:14580d43056d87cf84a2ce5f2fc7fa5ad3dd47745e53f431bff1203db20a7b77_amd64"
},
"product_reference": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:14580d43056d87cf84a2ce5f2fc7fa5ad3dd47745e53f431bff1203db20a7b77_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:5ee44d986d12f117a4b78bdef0e015e9dea12e8d80a6d981c38934cf7587a36b_arm64 as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:5ee44d986d12f117a4b78bdef0e015e9dea12e8d80a6d981c38934cf7587a36b_arm64"
},
"product_reference": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:5ee44d986d12f117a4b78bdef0e015e9dea12e8d80a6d981c38934cf7587a36b_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:65ee346de74922a3d3a15d8fdda96809bfdc7fedb332fd3be6b2bf7f0471e622_ppc64le as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:65ee346de74922a3d3a15d8fdda96809bfdc7fedb332fd3be6b2bf7f0471e622_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:65ee346de74922a3d3a15d8fdda96809bfdc7fedb332fd3be6b2bf7f0471e622_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:481789c068fba9b6bd657a2e193b33d6c4fb5c6cff0d0f63a7e55986e56d0eba_amd64 as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:481789c068fba9b6bd657a2e193b33d6c4fb5c6cff0d0f63a7e55986e56d0eba_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:481789c068fba9b6bd657a2e193b33d6c4fb5c6cff0d0f63a7e55986e56d0eba_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:7414e957f7abbccb77a45b4bddcfc22b3b6d72077cc995226bc8874d5ae299f0_arm64 as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:7414e957f7abbccb77a45b4bddcfc22b3b6d72077cc995226bc8874d5ae299f0_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:7414e957f7abbccb77a45b4bddcfc22b3b6d72077cc995226bc8874d5ae299f0_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:a9df2055d0d970ba40f5b2ed3cbf8a8418b60090fed5858a6cbce116e70917ae_s390x as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:a9df2055d0d970ba40f5b2ed3cbf8a8418b60090fed5858a6cbce116e70917ae_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:a9df2055d0d970ba40f5b2ed3cbf8a8418b60090fed5858a6cbce116e70917ae_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:e2033ab2cd2e3f98576c6cfea20297829adf40d3f7f50b6eac1a1a66e3295f4c_ppc64le as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:e2033ab2cd2e3f98576c6cfea20297829adf40d3f7f50b6eac1a1a66e3295f4c_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:e2033ab2cd2e3f98576c6cfea20297829adf40d3f7f50b6eac1a1a66e3295f4c_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:19806d3ba170fa6a9aaaf83b1c25dde1d20e7a07061dc04e931b37ce81996e3a_arm64 as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:19806d3ba170fa6a9aaaf83b1c25dde1d20e7a07061dc04e931b37ce81996e3a_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:19806d3ba170fa6a9aaaf83b1c25dde1d20e7a07061dc04e931b37ce81996e3a_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:4ae0174eec7cff35f2ae0926d28975ad4d2f303c4c3259fc5e2b9deea91699ad_amd64 as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:4ae0174eec7cff35f2ae0926d28975ad4d2f303c4c3259fc5e2b9deea91699ad_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:4ae0174eec7cff35f2ae0926d28975ad4d2f303c4c3259fc5e2b9deea91699ad_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:5438bb301dc7d71c1fc945bcfb0e966e0a96d38fc0a6ddb0fd40da43aa4a7282_s390x as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:5438bb301dc7d71c1fc945bcfb0e966e0a96d38fc0a6ddb0fd40da43aa4a7282_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:5438bb301dc7d71c1fc945bcfb0e966e0a96d38fc0a6ddb0fd40da43aa4a7282_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ef993089bcd3530c78589e14a11b8214bc98d444553156b59ea1fb2395550f6b_ppc64le as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ef993089bcd3530c78589e14a11b8214bc98d444553156b59ea1fb2395550f6b_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ef993089bcd3530c78589e14a11b8214bc98d444553156b59ea1fb2395550f6b_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:417a162d360d2da6bb1aec58f44a3400482fcaa9c535929e62676c1834524ead_arm64 as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:417a162d360d2da6bb1aec58f44a3400482fcaa9c535929e62676c1834524ead_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:417a162d360d2da6bb1aec58f44a3400482fcaa9c535929e62676c1834524ead_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:44230e060120cd247e24f22e21b03423ac13b4f41f6eb081172f9be06f25c584_amd64 as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:44230e060120cd247e24f22e21b03423ac13b4f41f6eb081172f9be06f25c584_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:44230e060120cd247e24f22e21b03423ac13b4f41f6eb081172f9be06f25c584_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:68d192c8b0b1fe78c82e9640cb734ac14b2321a8c710f88ac06bb87892fb2313_ppc64le as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:68d192c8b0b1fe78c82e9640cb734ac14b2321a8c710f88ac06bb87892fb2313_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:68d192c8b0b1fe78c82e9640cb734ac14b2321a8c710f88ac06bb87892fb2313_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:f18eef7c2dd973425a667f993bd8c3ed5b06acf098276d56d4840da210b11b2e_s390x as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:f18eef7c2dd973425a667f993bd8c3ed5b06acf098276d56d4840da210b11b2e_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-console-rhel9@sha256:f18eef7c2dd973425a667f993bd8c3ed5b06acf098276d56d4840da210b11b2e_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:0d1c736eb20d065e6c48a12902c87396f8babdea65207a838301dad0937c7e2e_s390x as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:0d1c736eb20d065e6c48a12902c87396f8babdea65207a838301dad0937c7e2e_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:0d1c736eb20d065e6c48a12902c87396f8babdea65207a838301dad0937c7e2e_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:303de185a374a7d3a22eec6d10e1c8a178f68a33d0573b195fa8d9b40d67becc_ppc64le as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:303de185a374a7d3a22eec6d10e1c8a178f68a33d0573b195fa8d9b40d67becc_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:303de185a374a7d3a22eec6d10e1c8a178f68a33d0573b195fa8d9b40d67becc_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:84153090a97f4d2fd7c9136a40cf98d5bbc86acf9ae978d8ae17a731284d5aaf_amd64 as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:84153090a97f4d2fd7c9136a40cf98d5bbc86acf9ae978d8ae17a731284d5aaf_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:84153090a97f4d2fd7c9136a40cf98d5bbc86acf9ae978d8ae17a731284d5aaf_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:cdea7b9a3878b0f1b087fc19587e91f6c35a1325e09efe411985f35c7af7a3d4_arm64 as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:cdea7b9a3878b0f1b087fc19587e91f6c35a1325e09efe411985f35c7af7a3d4_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:cdea7b9a3878b0f1b087fc19587e91f6c35a1325e09efe411985f35c7af7a3d4_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:3df178f2cdc1b46a0fb728b1ce65689052c1728cfacadd4ad95383017a625202_amd64 as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:3df178f2cdc1b46a0fb728b1ce65689052c1728cfacadd4ad95383017a625202_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:3df178f2cdc1b46a0fb728b1ce65689052c1728cfacadd4ad95383017a625202_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:6b500dcb1d4dd390820c45b6c53cf5edc822e49dacd525fb4530ce904c09d8f1_arm64 as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:6b500dcb1d4dd390820c45b6c53cf5edc822e49dacd525fb4530ce904c09d8f1_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:6b500dcb1d4dd390820c45b6c53cf5edc822e49dacd525fb4530ce904c09d8f1_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:683cd49dfc9a43c876db6cf94b9f7e417cee3f7bc0adbd320aa0cb924b817732_amd64 as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:683cd49dfc9a43c876db6cf94b9f7e417cee3f7bc0adbd320aa0cb924b817732_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:683cd49dfc9a43c876db6cf94b9f7e417cee3f7bc0adbd320aa0cb924b817732_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:9a59698fa26507d2dac42c9d5add511fcb224a25bbc2b8d6c24f443ee8c28410_arm64 as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:9a59698fa26507d2dac42c9d5add511fcb224a25bbc2b8d6c24f443ee8c28410_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:9a59698fa26507d2dac42c9d5add511fcb224a25bbc2b8d6c24f443ee8c28410_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:1833524376750ff3cf91d4e95eb6670180428c4d936520002a6cf27ecde777f1_amd64 as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:1833524376750ff3cf91d4e95eb6670180428c4d936520002a6cf27ecde777f1_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:1833524376750ff3cf91d4e95eb6670180428c4d936520002a6cf27ecde777f1_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:57686feccedbbb655b36d5231aa69f47b0d77ff9c04203bb78218feb0367585e_s390x as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:57686feccedbbb655b36d5231aa69f47b0d77ff9c04203bb78218feb0367585e_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:57686feccedbbb655b36d5231aa69f47b0d77ff9c04203bb78218feb0367585e_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:749150b69ff000b5f45a5c169ef58c2c67541f1f5caba7539a2e8e133abb122c_arm64 as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:749150b69ff000b5f45a5c169ef58c2c67541f1f5caba7539a2e8e133abb122c_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:749150b69ff000b5f45a5c169ef58c2c67541f1f5caba7539a2e8e133abb122c_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:a3085627a26e2e6c6be38a3a6757523da4da6130a8517e6fc37076df6ee101f7_ppc64le as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:a3085627a26e2e6c6be38a3a6757523da4da6130a8517e6fc37076df6ee101f7_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:a3085627a26e2e6c6be38a3a6757523da4da6130a8517e6fc37076df6ee101f7_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:134def2853a731f3d51183c2efbd3d475cf64156dd3fec97cf84a2ff46f3297e_s390x as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:134def2853a731f3d51183c2efbd3d475cf64156dd3fec97cf84a2ff46f3297e_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:134def2853a731f3d51183c2efbd3d475cf64156dd3fec97cf84a2ff46f3297e_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:32455bd12de20c48a129c30001ee8dadb6583182df7797ee6ace06e3a4a09547_arm64 as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:32455bd12de20c48a129c30001ee8dadb6583182df7797ee6ace06e3a4a09547_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:32455bd12de20c48a129c30001ee8dadb6583182df7797ee6ace06e3a4a09547_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:4873d888ea06945c205c5d1810c0ab733fb1ecfd09a7479a57bdfa79b0a817f3_amd64 as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:4873d888ea06945c205c5d1810c0ab733fb1ecfd09a7479a57bdfa79b0a817f3_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:4873d888ea06945c205c5d1810c0ab733fb1ecfd09a7479a57bdfa79b0a817f3_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:806df3b271c6ca7e964042117e47a09e6d8c6aa172b5413e6863381acc0b1202_ppc64le as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:806df3b271c6ca7e964042117e47a09e6d8c6aa172b5413e6863381acc0b1202_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:806df3b271c6ca7e964042117e47a09e6d8c6aa172b5413e6863381acc0b1202_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:0c0289461e7dc8ace658fee1c39f97e7718f563d903e103436da4359f8570b65_amd64 as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:0c0289461e7dc8ace658fee1c39f97e7718f563d903e103436da4359f8570b65_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:0c0289461e7dc8ace658fee1c39f97e7718f563d903e103436da4359f8570b65_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:33578de6f34f30567f0b7d3b5cda88e441026c02fa3a404876672fe586313f73_ppc64le as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:33578de6f34f30567f0b7d3b5cda88e441026c02fa3a404876672fe586313f73_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:33578de6f34f30567f0b7d3b5cda88e441026c02fa3a404876672fe586313f73_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:5baa44685b91e787650260630be8ba4a375b89075ac0c2044028ec66b9e9fe85_s390x as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:5baa44685b91e787650260630be8ba4a375b89075ac0c2044028ec66b9e9fe85_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:5baa44685b91e787650260630be8ba4a375b89075ac0c2044028ec66b9e9fe85_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:d5e995a9e67601d5caca85a6279393e8a7535d06071c1cb8892c85f1ec9c6c7a_arm64 as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:d5e995a9e67601d5caca85a6279393e8a7535d06071c1cb8892c85f1ec9c6c7a_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:d5e995a9e67601d5caca85a6279393e8a7535d06071c1cb8892c85f1ec9c6c7a_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:1dcaf6f017f0cf1d06f5626490fec03a29101f94ff4e88e487a81c6c403b5533_ppc64le as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:1dcaf6f017f0cf1d06f5626490fec03a29101f94ff4e88e487a81c6c403b5533_ppc64le"
},
"product_reference": "registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:1dcaf6f017f0cf1d06f5626490fec03a29101f94ff4e88e487a81c6c403b5533_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:384e092f3affff6a2e7bf4b5a2c288046c32175d5a4f032905d6a2fcaff800d1_amd64 as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:384e092f3affff6a2e7bf4b5a2c288046c32175d5a4f032905d6a2fcaff800d1_amd64"
},
"product_reference": "registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:384e092f3affff6a2e7bf4b5a2c288046c32175d5a4f032905d6a2fcaff800d1_amd64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a5a27f6ce4c81f82f91ef9b926e8ed134419357433ad84ba067483a518b572d2_arm64 as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a5a27f6ce4c81f82f91ef9b926e8ed134419357433ad84ba067483a518b572d2_arm64"
},
"product_reference": "registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a5a27f6ce4c81f82f91ef9b926e8ed134419357433ad84ba067483a518b572d2_arm64",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.18"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a7f6a9f55ead1030ce6fbc0fd991e5d4f5f7642a73e86605486eef6637036e08_s390x as a component of Red Hat OpenShift Container Platform 4.18",
"product_id": "Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a7f6a9f55ead1030ce6fbc0fd991e5d4f5f7642a73e86605486eef6637036e08_s390x"
},
"product_reference": "registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a7f6a9f55ead1030ce6fbc0fd991e5d4f5f7642a73e86605486eef6637036e08_s390x",
"relates_to_product_reference": "Red Hat OpenShift Container Platform 4.18"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-4800",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-03-31T20:01:21.918257+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:0866eb3d44068199d2511abb8d1ca782dd61dd66b13a6d0b72dbc727c2331ded_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:14580d43056d87cf84a2ce5f2fc7fa5ad3dd47745e53f431bff1203db20a7b77_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:5ee44d986d12f117a4b78bdef0e015e9dea12e8d80a6d981c38934cf7587a36b_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:65ee346de74922a3d3a15d8fdda96809bfdc7fedb332fd3be6b2bf7f0471e622_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:481789c068fba9b6bd657a2e193b33d6c4fb5c6cff0d0f63a7e55986e56d0eba_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:7414e957f7abbccb77a45b4bddcfc22b3b6d72077cc995226bc8874d5ae299f0_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:a9df2055d0d970ba40f5b2ed3cbf8a8418b60090fed5858a6cbce116e70917ae_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:e2033ab2cd2e3f98576c6cfea20297829adf40d3f7f50b6eac1a1a66e3295f4c_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:19806d3ba170fa6a9aaaf83b1c25dde1d20e7a07061dc04e931b37ce81996e3a_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:4ae0174eec7cff35f2ae0926d28975ad4d2f303c4c3259fc5e2b9deea91699ad_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:5438bb301dc7d71c1fc945bcfb0e966e0a96d38fc0a6ddb0fd40da43aa4a7282_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ef993089bcd3530c78589e14a11b8214bc98d444553156b59ea1fb2395550f6b_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:0d1c736eb20d065e6c48a12902c87396f8babdea65207a838301dad0937c7e2e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:303de185a374a7d3a22eec6d10e1c8a178f68a33d0573b195fa8d9b40d67becc_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:84153090a97f4d2fd7c9136a40cf98d5bbc86acf9ae978d8ae17a731284d5aaf_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:cdea7b9a3878b0f1b087fc19587e91f6c35a1325e09efe411985f35c7af7a3d4_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:3df178f2cdc1b46a0fb728b1ce65689052c1728cfacadd4ad95383017a625202_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:6b500dcb1d4dd390820c45b6c53cf5edc822e49dacd525fb4530ce904c09d8f1_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:683cd49dfc9a43c876db6cf94b9f7e417cee3f7bc0adbd320aa0cb924b817732_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:9a59698fa26507d2dac42c9d5add511fcb224a25bbc2b8d6c24f443ee8c28410_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:1833524376750ff3cf91d4e95eb6670180428c4d936520002a6cf27ecde777f1_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:57686feccedbbb655b36d5231aa69f47b0d77ff9c04203bb78218feb0367585e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:749150b69ff000b5f45a5c169ef58c2c67541f1f5caba7539a2e8e133abb122c_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:a3085627a26e2e6c6be38a3a6757523da4da6130a8517e6fc37076df6ee101f7_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:134def2853a731f3d51183c2efbd3d475cf64156dd3fec97cf84a2ff46f3297e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:32455bd12de20c48a129c30001ee8dadb6583182df7797ee6ace06e3a4a09547_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:4873d888ea06945c205c5d1810c0ab733fb1ecfd09a7479a57bdfa79b0a817f3_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:806df3b271c6ca7e964042117e47a09e6d8c6aa172b5413e6863381acc0b1202_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:0c0289461e7dc8ace658fee1c39f97e7718f563d903e103436da4359f8570b65_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:33578de6f34f30567f0b7d3b5cda88e441026c02fa3a404876672fe586313f73_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:5baa44685b91e787650260630be8ba4a375b89075ac0c2044028ec66b9e9fe85_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:d5e995a9e67601d5caca85a6279393e8a7535d06071c1cb8892c85f1ec9c6c7a_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:1dcaf6f017f0cf1d06f5626490fec03a29101f94ff4e88e487a81c6c403b5533_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:384e092f3affff6a2e7bf4b5a2c288046c32175d5a4f032905d6a2fcaff800d1_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a5a27f6ce4c81f82f91ef9b926e8ed134419357433ad84ba067483a518b572d2_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a7f6a9f55ead1030ce6fbc0fd991e5d4f5f7642a73e86605486eef6637036e08_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453496"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in lodash. The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names. Both paths flow into the same Function() constructor sink. Additionally, _.template uses assignInWith to merge imports, which enumerates inherited properties via for..in. If Object.prototype has been polluted by any other vector, the polluted keys are copied into the imports object and passed to Function().",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lodash: lodash: Arbitrary code execution via untrusted input in template imports",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In the context of Red Hat Enterprise Linux, the grafana and grafana-pcp packages execute the affected JavaScript entirely client-side within the user\u0027s browser. Consequently, the attack surface is strictly restricted to the local browser environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:417a162d360d2da6bb1aec58f44a3400482fcaa9c535929e62676c1834524ead_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:44230e060120cd247e24f22e21b03423ac13b4f41f6eb081172f9be06f25c584_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:68d192c8b0b1fe78c82e9640cb734ac14b2321a8c710f88ac06bb87892fb2313_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:f18eef7c2dd973425a667f993bd8c3ed5b06acf098276d56d4840da210b11b2e_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:0866eb3d44068199d2511abb8d1ca782dd61dd66b13a6d0b72dbc727c2331ded_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:14580d43056d87cf84a2ce5f2fc7fa5ad3dd47745e53f431bff1203db20a7b77_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:5ee44d986d12f117a4b78bdef0e015e9dea12e8d80a6d981c38934cf7587a36b_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:65ee346de74922a3d3a15d8fdda96809bfdc7fedb332fd3be6b2bf7f0471e622_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:481789c068fba9b6bd657a2e193b33d6c4fb5c6cff0d0f63a7e55986e56d0eba_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:7414e957f7abbccb77a45b4bddcfc22b3b6d72077cc995226bc8874d5ae299f0_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:a9df2055d0d970ba40f5b2ed3cbf8a8418b60090fed5858a6cbce116e70917ae_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:e2033ab2cd2e3f98576c6cfea20297829adf40d3f7f50b6eac1a1a66e3295f4c_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:19806d3ba170fa6a9aaaf83b1c25dde1d20e7a07061dc04e931b37ce81996e3a_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:4ae0174eec7cff35f2ae0926d28975ad4d2f303c4c3259fc5e2b9deea91699ad_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:5438bb301dc7d71c1fc945bcfb0e966e0a96d38fc0a6ddb0fd40da43aa4a7282_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ef993089bcd3530c78589e14a11b8214bc98d444553156b59ea1fb2395550f6b_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:0d1c736eb20d065e6c48a12902c87396f8babdea65207a838301dad0937c7e2e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:303de185a374a7d3a22eec6d10e1c8a178f68a33d0573b195fa8d9b40d67becc_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:84153090a97f4d2fd7c9136a40cf98d5bbc86acf9ae978d8ae17a731284d5aaf_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:cdea7b9a3878b0f1b087fc19587e91f6c35a1325e09efe411985f35c7af7a3d4_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:3df178f2cdc1b46a0fb728b1ce65689052c1728cfacadd4ad95383017a625202_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:6b500dcb1d4dd390820c45b6c53cf5edc822e49dacd525fb4530ce904c09d8f1_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:683cd49dfc9a43c876db6cf94b9f7e417cee3f7bc0adbd320aa0cb924b817732_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:9a59698fa26507d2dac42c9d5add511fcb224a25bbc2b8d6c24f443ee8c28410_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:1833524376750ff3cf91d4e95eb6670180428c4d936520002a6cf27ecde777f1_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:57686feccedbbb655b36d5231aa69f47b0d77ff9c04203bb78218feb0367585e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:749150b69ff000b5f45a5c169ef58c2c67541f1f5caba7539a2e8e133abb122c_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:a3085627a26e2e6c6be38a3a6757523da4da6130a8517e6fc37076df6ee101f7_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:134def2853a731f3d51183c2efbd3d475cf64156dd3fec97cf84a2ff46f3297e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:32455bd12de20c48a129c30001ee8dadb6583182df7797ee6ace06e3a4a09547_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:4873d888ea06945c205c5d1810c0ab733fb1ecfd09a7479a57bdfa79b0a817f3_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:806df3b271c6ca7e964042117e47a09e6d8c6aa172b5413e6863381acc0b1202_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:0c0289461e7dc8ace658fee1c39f97e7718f563d903e103436da4359f8570b65_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:33578de6f34f30567f0b7d3b5cda88e441026c02fa3a404876672fe586313f73_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:5baa44685b91e787650260630be8ba4a375b89075ac0c2044028ec66b9e9fe85_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:d5e995a9e67601d5caca85a6279393e8a7535d06071c1cb8892c85f1ec9c6c7a_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:1dcaf6f017f0cf1d06f5626490fec03a29101f94ff4e88e487a81c6c403b5533_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:384e092f3affff6a2e7bf4b5a2c288046c32175d5a4f032905d6a2fcaff800d1_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a5a27f6ce4c81f82f91ef9b926e8ed134419357433ad84ba067483a518b572d2_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a7f6a9f55ead1030ce6fbc0fd991e5d4f5f7642a73e86605486eef6637036e08_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4800"
},
{
"category": "external",
"summary": "RHBZ#2453496",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453496"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4800",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4800"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4800"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm",
"url": "https://github.com/advisories/GHSA-35jh-r3h4-6jhm"
},
{
"category": "external",
"summary": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c",
"url": "https://github.com/lodash/lodash/commit/3469357cff396a26c363f8c1b5a91dde28ba4b1c"
}
],
"release_date": "2026-03-31T19:25:55.987000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T07:07:38+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:0bf08effa1f11a7afd1c21574a1d25b4004b12511fe790c651162074e48e06fe\n\n (For s390x architecture)\n The image digest is sha256:40eaec63a2f8e89c28026a764898b25620654f17fe2ccfc1cdd010762e1d8246\n\n (For ppc64le architecture)\n The image digest is sha256:09115b927b43a0327698fd02fc9d87f3999966bbd5f41bdeffccaabb84a2fac9\n\n (For aarch64 architecture)\n The image digest is sha256:44a25bbf10e6796842df3ff64d13e27ff5a942850eef28c1d3e0fb2bedf2b366\n\nAll OpenShift Container Platform 4.18 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:417a162d360d2da6bb1aec58f44a3400482fcaa9c535929e62676c1834524ead_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:44230e060120cd247e24f22e21b03423ac13b4f41f6eb081172f9be06f25c584_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:68d192c8b0b1fe78c82e9640cb734ac14b2321a8c710f88ac06bb87892fb2313_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:f18eef7c2dd973425a667f993bd8c3ed5b06acf098276d56d4840da210b11b2e_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48699"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:0866eb3d44068199d2511abb8d1ca782dd61dd66b13a6d0b72dbc727c2331ded_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:14580d43056d87cf84a2ce5f2fc7fa5ad3dd47745e53f431bff1203db20a7b77_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:5ee44d986d12f117a4b78bdef0e015e9dea12e8d80a6d981c38934cf7587a36b_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:65ee346de74922a3d3a15d8fdda96809bfdc7fedb332fd3be6b2bf7f0471e622_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:481789c068fba9b6bd657a2e193b33d6c4fb5c6cff0d0f63a7e55986e56d0eba_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:7414e957f7abbccb77a45b4bddcfc22b3b6d72077cc995226bc8874d5ae299f0_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:a9df2055d0d970ba40f5b2ed3cbf8a8418b60090fed5858a6cbce116e70917ae_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:e2033ab2cd2e3f98576c6cfea20297829adf40d3f7f50b6eac1a1a66e3295f4c_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:19806d3ba170fa6a9aaaf83b1c25dde1d20e7a07061dc04e931b37ce81996e3a_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:4ae0174eec7cff35f2ae0926d28975ad4d2f303c4c3259fc5e2b9deea91699ad_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:5438bb301dc7d71c1fc945bcfb0e966e0a96d38fc0a6ddb0fd40da43aa4a7282_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ef993089bcd3530c78589e14a11b8214bc98d444553156b59ea1fb2395550f6b_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:417a162d360d2da6bb1aec58f44a3400482fcaa9c535929e62676c1834524ead_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:44230e060120cd247e24f22e21b03423ac13b4f41f6eb081172f9be06f25c584_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:68d192c8b0b1fe78c82e9640cb734ac14b2321a8c710f88ac06bb87892fb2313_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:f18eef7c2dd973425a667f993bd8c3ed5b06acf098276d56d4840da210b11b2e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:0d1c736eb20d065e6c48a12902c87396f8babdea65207a838301dad0937c7e2e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:303de185a374a7d3a22eec6d10e1c8a178f68a33d0573b195fa8d9b40d67becc_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:84153090a97f4d2fd7c9136a40cf98d5bbc86acf9ae978d8ae17a731284d5aaf_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:cdea7b9a3878b0f1b087fc19587e91f6c35a1325e09efe411985f35c7af7a3d4_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:3df178f2cdc1b46a0fb728b1ce65689052c1728cfacadd4ad95383017a625202_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:6b500dcb1d4dd390820c45b6c53cf5edc822e49dacd525fb4530ce904c09d8f1_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:683cd49dfc9a43c876db6cf94b9f7e417cee3f7bc0adbd320aa0cb924b817732_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:9a59698fa26507d2dac42c9d5add511fcb224a25bbc2b8d6c24f443ee8c28410_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:1833524376750ff3cf91d4e95eb6670180428c4d936520002a6cf27ecde777f1_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:57686feccedbbb655b36d5231aa69f47b0d77ff9c04203bb78218feb0367585e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:749150b69ff000b5f45a5c169ef58c2c67541f1f5caba7539a2e8e133abb122c_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:a3085627a26e2e6c6be38a3a6757523da4da6130a8517e6fc37076df6ee101f7_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:134def2853a731f3d51183c2efbd3d475cf64156dd3fec97cf84a2ff46f3297e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:32455bd12de20c48a129c30001ee8dadb6583182df7797ee6ace06e3a4a09547_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:4873d888ea06945c205c5d1810c0ab733fb1ecfd09a7479a57bdfa79b0a817f3_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:806df3b271c6ca7e964042117e47a09e6d8c6aa172b5413e6863381acc0b1202_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:0c0289461e7dc8ace658fee1c39f97e7718f563d903e103436da4359f8570b65_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:33578de6f34f30567f0b7d3b5cda88e441026c02fa3a404876672fe586313f73_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:5baa44685b91e787650260630be8ba4a375b89075ac0c2044028ec66b9e9fe85_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:d5e995a9e67601d5caca85a6279393e8a7535d06071c1cb8892c85f1ec9c6c7a_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:1dcaf6f017f0cf1d06f5626490fec03a29101f94ff4e88e487a81c6c403b5533_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:384e092f3affff6a2e7bf4b5a2c288046c32175d5a4f032905d6a2fcaff800d1_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a5a27f6ce4c81f82f91ef9b926e8ed134419357433ad84ba067483a518b572d2_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a7f6a9f55ead1030ce6fbc0fd991e5d4f5f7642a73e86605486eef6637036e08_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:0866eb3d44068199d2511abb8d1ca782dd61dd66b13a6d0b72dbc727c2331ded_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:14580d43056d87cf84a2ce5f2fc7fa5ad3dd47745e53f431bff1203db20a7b77_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:5ee44d986d12f117a4b78bdef0e015e9dea12e8d80a6d981c38934cf7587a36b_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:65ee346de74922a3d3a15d8fdda96809bfdc7fedb332fd3be6b2bf7f0471e622_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:481789c068fba9b6bd657a2e193b33d6c4fb5c6cff0d0f63a7e55986e56d0eba_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:7414e957f7abbccb77a45b4bddcfc22b3b6d72077cc995226bc8874d5ae299f0_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:a9df2055d0d970ba40f5b2ed3cbf8a8418b60090fed5858a6cbce116e70917ae_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:e2033ab2cd2e3f98576c6cfea20297829adf40d3f7f50b6eac1a1a66e3295f4c_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:19806d3ba170fa6a9aaaf83b1c25dde1d20e7a07061dc04e931b37ce81996e3a_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:4ae0174eec7cff35f2ae0926d28975ad4d2f303c4c3259fc5e2b9deea91699ad_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:5438bb301dc7d71c1fc945bcfb0e966e0a96d38fc0a6ddb0fd40da43aa4a7282_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ef993089bcd3530c78589e14a11b8214bc98d444553156b59ea1fb2395550f6b_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:417a162d360d2da6bb1aec58f44a3400482fcaa9c535929e62676c1834524ead_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:44230e060120cd247e24f22e21b03423ac13b4f41f6eb081172f9be06f25c584_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:68d192c8b0b1fe78c82e9640cb734ac14b2321a8c710f88ac06bb87892fb2313_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:f18eef7c2dd973425a667f993bd8c3ed5b06acf098276d56d4840da210b11b2e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:0d1c736eb20d065e6c48a12902c87396f8babdea65207a838301dad0937c7e2e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:303de185a374a7d3a22eec6d10e1c8a178f68a33d0573b195fa8d9b40d67becc_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:84153090a97f4d2fd7c9136a40cf98d5bbc86acf9ae978d8ae17a731284d5aaf_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:cdea7b9a3878b0f1b087fc19587e91f6c35a1325e09efe411985f35c7af7a3d4_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:3df178f2cdc1b46a0fb728b1ce65689052c1728cfacadd4ad95383017a625202_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:6b500dcb1d4dd390820c45b6c53cf5edc822e49dacd525fb4530ce904c09d8f1_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:683cd49dfc9a43c876db6cf94b9f7e417cee3f7bc0adbd320aa0cb924b817732_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:9a59698fa26507d2dac42c9d5add511fcb224a25bbc2b8d6c24f443ee8c28410_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:1833524376750ff3cf91d4e95eb6670180428c4d936520002a6cf27ecde777f1_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:57686feccedbbb655b36d5231aa69f47b0d77ff9c04203bb78218feb0367585e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:749150b69ff000b5f45a5c169ef58c2c67541f1f5caba7539a2e8e133abb122c_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:a3085627a26e2e6c6be38a3a6757523da4da6130a8517e6fc37076df6ee101f7_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:134def2853a731f3d51183c2efbd3d475cf64156dd3fec97cf84a2ff46f3297e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:32455bd12de20c48a129c30001ee8dadb6583182df7797ee6ace06e3a4a09547_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:4873d888ea06945c205c5d1810c0ab733fb1ecfd09a7479a57bdfa79b0a817f3_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:806df3b271c6ca7e964042117e47a09e6d8c6aa172b5413e6863381acc0b1202_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:0c0289461e7dc8ace658fee1c39f97e7718f563d903e103436da4359f8570b65_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:33578de6f34f30567f0b7d3b5cda88e441026c02fa3a404876672fe586313f73_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:5baa44685b91e787650260630be8ba4a375b89075ac0c2044028ec66b9e9fe85_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:d5e995a9e67601d5caca85a6279393e8a7535d06071c1cb8892c85f1ec9c6c7a_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:1dcaf6f017f0cf1d06f5626490fec03a29101f94ff4e88e487a81c6c403b5533_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:384e092f3affff6a2e7bf4b5a2c288046c32175d5a4f032905d6a2fcaff800d1_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a5a27f6ce4c81f82f91ef9b926e8ed134419357433ad84ba067483a518b572d2_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a7f6a9f55ead1030ce6fbc0fd991e5d4f5f7642a73e86605486eef6637036e08_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lodash: lodash: Arbitrary code execution via untrusted input in template imports"
},
{
"cve": "CVE-2026-9277",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-05-22T14:01:14.427751+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:0866eb3d44068199d2511abb8d1ca782dd61dd66b13a6d0b72dbc727c2331ded_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:14580d43056d87cf84a2ce5f2fc7fa5ad3dd47745e53f431bff1203db20a7b77_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:5ee44d986d12f117a4b78bdef0e015e9dea12e8d80a6d981c38934cf7587a36b_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:65ee346de74922a3d3a15d8fdda96809bfdc7fedb332fd3be6b2bf7f0471e622_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:481789c068fba9b6bd657a2e193b33d6c4fb5c6cff0d0f63a7e55986e56d0eba_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:7414e957f7abbccb77a45b4bddcfc22b3b6d72077cc995226bc8874d5ae299f0_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:a9df2055d0d970ba40f5b2ed3cbf8a8418b60090fed5858a6cbce116e70917ae_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:e2033ab2cd2e3f98576c6cfea20297829adf40d3f7f50b6eac1a1a66e3295f4c_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:19806d3ba170fa6a9aaaf83b1c25dde1d20e7a07061dc04e931b37ce81996e3a_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:4ae0174eec7cff35f2ae0926d28975ad4d2f303c4c3259fc5e2b9deea91699ad_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:5438bb301dc7d71c1fc945bcfb0e966e0a96d38fc0a6ddb0fd40da43aa4a7282_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ef993089bcd3530c78589e14a11b8214bc98d444553156b59ea1fb2395550f6b_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:0d1c736eb20d065e6c48a12902c87396f8babdea65207a838301dad0937c7e2e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:303de185a374a7d3a22eec6d10e1c8a178f68a33d0573b195fa8d9b40d67becc_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:84153090a97f4d2fd7c9136a40cf98d5bbc86acf9ae978d8ae17a731284d5aaf_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:cdea7b9a3878b0f1b087fc19587e91f6c35a1325e09efe411985f35c7af7a3d4_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:3df178f2cdc1b46a0fb728b1ce65689052c1728cfacadd4ad95383017a625202_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:6b500dcb1d4dd390820c45b6c53cf5edc822e49dacd525fb4530ce904c09d8f1_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:683cd49dfc9a43c876db6cf94b9f7e417cee3f7bc0adbd320aa0cb924b817732_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:9a59698fa26507d2dac42c9d5add511fcb224a25bbc2b8d6c24f443ee8c28410_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:1833524376750ff3cf91d4e95eb6670180428c4d936520002a6cf27ecde777f1_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:57686feccedbbb655b36d5231aa69f47b0d77ff9c04203bb78218feb0367585e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:749150b69ff000b5f45a5c169ef58c2c67541f1f5caba7539a2e8e133abb122c_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:a3085627a26e2e6c6be38a3a6757523da4da6130a8517e6fc37076df6ee101f7_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:134def2853a731f3d51183c2efbd3d475cf64156dd3fec97cf84a2ff46f3297e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:32455bd12de20c48a129c30001ee8dadb6583182df7797ee6ace06e3a4a09547_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:4873d888ea06945c205c5d1810c0ab733fb1ecfd09a7479a57bdfa79b0a817f3_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:806df3b271c6ca7e964042117e47a09e6d8c6aa172b5413e6863381acc0b1202_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:0c0289461e7dc8ace658fee1c39f97e7718f563d903e103436da4359f8570b65_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:33578de6f34f30567f0b7d3b5cda88e441026c02fa3a404876672fe586313f73_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:5baa44685b91e787650260630be8ba4a375b89075ac0c2044028ec66b9e9fe85_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:d5e995a9e67601d5caca85a6279393e8a7535d06071c1cb8892c85f1ec9c6c7a_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:1dcaf6f017f0cf1d06f5626490fec03a29101f94ff4e88e487a81c6c403b5533_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:384e092f3affff6a2e7bf4b5a2c288046c32175d5a4f032905d6a2fcaff800d1_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a5a27f6ce4c81f82f91ef9b926e8ed134419357433ad84ba067483a518b572d2_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a7f6a9f55ead1030ce6fbc0fd991e5d4f5f7642a73e86605486eef6637036e08_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480741"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the shell-quote component. The quote() function did not properly validate object-token inputs, allowing line terminators to pass unescaped into the output. A remote attacker could exploit this vulnerability by providing specially crafted input, which a POSIX shell would interpret as a command separator. This could lead to command injection, enabling the attacker to execute arbitrary code on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:417a162d360d2da6bb1aec58f44a3400482fcaa9c535929e62676c1834524ead_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:44230e060120cd247e24f22e21b03423ac13b4f41f6eb081172f9be06f25c584_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:68d192c8b0b1fe78c82e9640cb734ac14b2321a8c710f88ac06bb87892fb2313_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:f18eef7c2dd973425a667f993bd8c3ed5b06acf098276d56d4840da210b11b2e_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:0866eb3d44068199d2511abb8d1ca782dd61dd66b13a6d0b72dbc727c2331ded_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:14580d43056d87cf84a2ce5f2fc7fa5ad3dd47745e53f431bff1203db20a7b77_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:5ee44d986d12f117a4b78bdef0e015e9dea12e8d80a6d981c38934cf7587a36b_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:65ee346de74922a3d3a15d8fdda96809bfdc7fedb332fd3be6b2bf7f0471e622_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:481789c068fba9b6bd657a2e193b33d6c4fb5c6cff0d0f63a7e55986e56d0eba_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:7414e957f7abbccb77a45b4bddcfc22b3b6d72077cc995226bc8874d5ae299f0_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:a9df2055d0d970ba40f5b2ed3cbf8a8418b60090fed5858a6cbce116e70917ae_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:e2033ab2cd2e3f98576c6cfea20297829adf40d3f7f50b6eac1a1a66e3295f4c_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:19806d3ba170fa6a9aaaf83b1c25dde1d20e7a07061dc04e931b37ce81996e3a_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:4ae0174eec7cff35f2ae0926d28975ad4d2f303c4c3259fc5e2b9deea91699ad_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:5438bb301dc7d71c1fc945bcfb0e966e0a96d38fc0a6ddb0fd40da43aa4a7282_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ef993089bcd3530c78589e14a11b8214bc98d444553156b59ea1fb2395550f6b_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:0d1c736eb20d065e6c48a12902c87396f8babdea65207a838301dad0937c7e2e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:303de185a374a7d3a22eec6d10e1c8a178f68a33d0573b195fa8d9b40d67becc_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:84153090a97f4d2fd7c9136a40cf98d5bbc86acf9ae978d8ae17a731284d5aaf_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:cdea7b9a3878b0f1b087fc19587e91f6c35a1325e09efe411985f35c7af7a3d4_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:3df178f2cdc1b46a0fb728b1ce65689052c1728cfacadd4ad95383017a625202_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:6b500dcb1d4dd390820c45b6c53cf5edc822e49dacd525fb4530ce904c09d8f1_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:683cd49dfc9a43c876db6cf94b9f7e417cee3f7bc0adbd320aa0cb924b817732_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:9a59698fa26507d2dac42c9d5add511fcb224a25bbc2b8d6c24f443ee8c28410_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:1833524376750ff3cf91d4e95eb6670180428c4d936520002a6cf27ecde777f1_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:57686feccedbbb655b36d5231aa69f47b0d77ff9c04203bb78218feb0367585e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:749150b69ff000b5f45a5c169ef58c2c67541f1f5caba7539a2e8e133abb122c_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:a3085627a26e2e6c6be38a3a6757523da4da6130a8517e6fc37076df6ee101f7_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:134def2853a731f3d51183c2efbd3d475cf64156dd3fec97cf84a2ff46f3297e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:32455bd12de20c48a129c30001ee8dadb6583182df7797ee6ace06e3a4a09547_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:4873d888ea06945c205c5d1810c0ab733fb1ecfd09a7479a57bdfa79b0a817f3_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:806df3b271c6ca7e964042117e47a09e6d8c6aa172b5413e6863381acc0b1202_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:0c0289461e7dc8ace658fee1c39f97e7718f563d903e103436da4359f8570b65_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:33578de6f34f30567f0b7d3b5cda88e441026c02fa3a404876672fe586313f73_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:5baa44685b91e787650260630be8ba4a375b89075ac0c2044028ec66b9e9fe85_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:d5e995a9e67601d5caca85a6279393e8a7535d06071c1cb8892c85f1ec9c6c7a_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:1dcaf6f017f0cf1d06f5626490fec03a29101f94ff4e88e487a81c6c403b5533_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:384e092f3affff6a2e7bf4b5a2c288046c32175d5a4f032905d6a2fcaff800d1_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a5a27f6ce4c81f82f91ef9b926e8ed134419357433ad84ba067483a518b572d2_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a7f6a9f55ead1030ce6fbc0fd991e5d4f5f7642a73e86605486eef6637036e08_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9277"
},
{
"category": "external",
"summary": "RHBZ#2480741",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480741"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9277",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9277"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9277"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote",
"url": "https://github.com/ljharb/shell-quote"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/commit/1518179",
"url": "https://github.com/ljharb/shell-quote/commit/1518179"
},
{
"category": "external",
"summary": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p",
"url": "https://github.com/ljharb/shell-quote/security/advisories/GHSA-w7jw-789q-3m8p"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/shell-quote",
"url": "https://www.npmjs.com/package/shell-quote"
}
],
"release_date": "2026-05-22T13:22:38.873000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T07:07:38+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:0bf08effa1f11a7afd1c21574a1d25b4004b12511fe790c651162074e48e06fe\n\n (For s390x architecture)\n The image digest is sha256:40eaec63a2f8e89c28026a764898b25620654f17fe2ccfc1cdd010762e1d8246\n\n (For ppc64le architecture)\n The image digest is sha256:09115b927b43a0327698fd02fc9d87f3999966bbd5f41bdeffccaabb84a2fac9\n\n (For aarch64 architecture)\n The image digest is sha256:44a25bbf10e6796842df3ff64d13e27ff5a942850eef28c1d3e0fb2bedf2b366\n\nAll OpenShift Container Platform 4.18 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:417a162d360d2da6bb1aec58f44a3400482fcaa9c535929e62676c1834524ead_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:44230e060120cd247e24f22e21b03423ac13b4f41f6eb081172f9be06f25c584_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:68d192c8b0b1fe78c82e9640cb734ac14b2321a8c710f88ac06bb87892fb2313_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:f18eef7c2dd973425a667f993bd8c3ed5b06acf098276d56d4840da210b11b2e_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48699"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:0866eb3d44068199d2511abb8d1ca782dd61dd66b13a6d0b72dbc727c2331ded_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:14580d43056d87cf84a2ce5f2fc7fa5ad3dd47745e53f431bff1203db20a7b77_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:5ee44d986d12f117a4b78bdef0e015e9dea12e8d80a6d981c38934cf7587a36b_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:65ee346de74922a3d3a15d8fdda96809bfdc7fedb332fd3be6b2bf7f0471e622_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:481789c068fba9b6bd657a2e193b33d6c4fb5c6cff0d0f63a7e55986e56d0eba_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:7414e957f7abbccb77a45b4bddcfc22b3b6d72077cc995226bc8874d5ae299f0_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:a9df2055d0d970ba40f5b2ed3cbf8a8418b60090fed5858a6cbce116e70917ae_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:e2033ab2cd2e3f98576c6cfea20297829adf40d3f7f50b6eac1a1a66e3295f4c_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:19806d3ba170fa6a9aaaf83b1c25dde1d20e7a07061dc04e931b37ce81996e3a_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:4ae0174eec7cff35f2ae0926d28975ad4d2f303c4c3259fc5e2b9deea91699ad_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:5438bb301dc7d71c1fc945bcfb0e966e0a96d38fc0a6ddb0fd40da43aa4a7282_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ef993089bcd3530c78589e14a11b8214bc98d444553156b59ea1fb2395550f6b_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:417a162d360d2da6bb1aec58f44a3400482fcaa9c535929e62676c1834524ead_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:44230e060120cd247e24f22e21b03423ac13b4f41f6eb081172f9be06f25c584_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:68d192c8b0b1fe78c82e9640cb734ac14b2321a8c710f88ac06bb87892fb2313_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:f18eef7c2dd973425a667f993bd8c3ed5b06acf098276d56d4840da210b11b2e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:0d1c736eb20d065e6c48a12902c87396f8babdea65207a838301dad0937c7e2e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:303de185a374a7d3a22eec6d10e1c8a178f68a33d0573b195fa8d9b40d67becc_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:84153090a97f4d2fd7c9136a40cf98d5bbc86acf9ae978d8ae17a731284d5aaf_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:cdea7b9a3878b0f1b087fc19587e91f6c35a1325e09efe411985f35c7af7a3d4_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:3df178f2cdc1b46a0fb728b1ce65689052c1728cfacadd4ad95383017a625202_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:6b500dcb1d4dd390820c45b6c53cf5edc822e49dacd525fb4530ce904c09d8f1_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:683cd49dfc9a43c876db6cf94b9f7e417cee3f7bc0adbd320aa0cb924b817732_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:9a59698fa26507d2dac42c9d5add511fcb224a25bbc2b8d6c24f443ee8c28410_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:1833524376750ff3cf91d4e95eb6670180428c4d936520002a6cf27ecde777f1_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:57686feccedbbb655b36d5231aa69f47b0d77ff9c04203bb78218feb0367585e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:749150b69ff000b5f45a5c169ef58c2c67541f1f5caba7539a2e8e133abb122c_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:a3085627a26e2e6c6be38a3a6757523da4da6130a8517e6fc37076df6ee101f7_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:134def2853a731f3d51183c2efbd3d475cf64156dd3fec97cf84a2ff46f3297e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:32455bd12de20c48a129c30001ee8dadb6583182df7797ee6ace06e3a4a09547_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:4873d888ea06945c205c5d1810c0ab733fb1ecfd09a7479a57bdfa79b0a817f3_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:806df3b271c6ca7e964042117e47a09e6d8c6aa172b5413e6863381acc0b1202_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:0c0289461e7dc8ace658fee1c39f97e7718f563d903e103436da4359f8570b65_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:33578de6f34f30567f0b7d3b5cda88e441026c02fa3a404876672fe586313f73_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:5baa44685b91e787650260630be8ba4a375b89075ac0c2044028ec66b9e9fe85_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:d5e995a9e67601d5caca85a6279393e8a7535d06071c1cb8892c85f1ec9c6c7a_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:1dcaf6f017f0cf1d06f5626490fec03a29101f94ff4e88e487a81c6c403b5533_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:384e092f3affff6a2e7bf4b5a2c288046c32175d5a4f032905d6a2fcaff800d1_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a5a27f6ce4c81f82f91ef9b926e8ed134419357433ad84ba067483a518b572d2_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a7f6a9f55ead1030ce6fbc0fd991e5d4f5f7642a73e86605486eef6637036e08_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "shell-quote: shell-quote: Arbitrary code execution via command injection due to unescaped line terminators"
},
{
"acknowledgments": [
{
"names": [
"Microsoft Security Research (MSRC)"
],
"organization": "Microsoft"
}
],
"cve": "CVE-2026-16242",
"cwe": {
"id": "CWE-306",
"name": "Missing Authentication for Critical Function"
},
"discovery_date": "2026-07-20T04:50:48.621000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:0866eb3d44068199d2511abb8d1ca782dd61dd66b13a6d0b72dbc727c2331ded_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:14580d43056d87cf84a2ce5f2fc7fa5ad3dd47745e53f431bff1203db20a7b77_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:5ee44d986d12f117a4b78bdef0e015e9dea12e8d80a6d981c38934cf7587a36b_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:65ee346de74922a3d3a15d8fdda96809bfdc7fedb332fd3be6b2bf7f0471e622_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:481789c068fba9b6bd657a2e193b33d6c4fb5c6cff0d0f63a7e55986e56d0eba_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:7414e957f7abbccb77a45b4bddcfc22b3b6d72077cc995226bc8874d5ae299f0_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:a9df2055d0d970ba40f5b2ed3cbf8a8418b60090fed5858a6cbce116e70917ae_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:e2033ab2cd2e3f98576c6cfea20297829adf40d3f7f50b6eac1a1a66e3295f4c_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:19806d3ba170fa6a9aaaf83b1c25dde1d20e7a07061dc04e931b37ce81996e3a_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:4ae0174eec7cff35f2ae0926d28975ad4d2f303c4c3259fc5e2b9deea91699ad_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:5438bb301dc7d71c1fc945bcfb0e966e0a96d38fc0a6ddb0fd40da43aa4a7282_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ef993089bcd3530c78589e14a11b8214bc98d444553156b59ea1fb2395550f6b_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:417a162d360d2da6bb1aec58f44a3400482fcaa9c535929e62676c1834524ead_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:44230e060120cd247e24f22e21b03423ac13b4f41f6eb081172f9be06f25c584_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:68d192c8b0b1fe78c82e9640cb734ac14b2321a8c710f88ac06bb87892fb2313_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:f18eef7c2dd973425a667f993bd8c3ed5b06acf098276d56d4840da210b11b2e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:3df178f2cdc1b46a0fb728b1ce65689052c1728cfacadd4ad95383017a625202_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:6b500dcb1d4dd390820c45b6c53cf5edc822e49dacd525fb4530ce904c09d8f1_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:683cd49dfc9a43c876db6cf94b9f7e417cee3f7bc0adbd320aa0cb924b817732_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:9a59698fa26507d2dac42c9d5add511fcb224a25bbc2b8d6c24f443ee8c28410_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:1833524376750ff3cf91d4e95eb6670180428c4d936520002a6cf27ecde777f1_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:57686feccedbbb655b36d5231aa69f47b0d77ff9c04203bb78218feb0367585e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:749150b69ff000b5f45a5c169ef58c2c67541f1f5caba7539a2e8e133abb122c_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:a3085627a26e2e6c6be38a3a6757523da4da6130a8517e6fc37076df6ee101f7_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:134def2853a731f3d51183c2efbd3d475cf64156dd3fec97cf84a2ff46f3297e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:32455bd12de20c48a129c30001ee8dadb6583182df7797ee6ace06e3a4a09547_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:4873d888ea06945c205c5d1810c0ab733fb1ecfd09a7479a57bdfa79b0a817f3_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:806df3b271c6ca7e964042117e47a09e6d8c6aa172b5413e6863381acc0b1202_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:0c0289461e7dc8ace658fee1c39f97e7718f563d903e103436da4359f8570b65_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:33578de6f34f30567f0b7d3b5cda88e441026c02fa3a404876672fe586313f73_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:5baa44685b91e787650260630be8ba4a375b89075ac0c2044028ec66b9e9fe85_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:d5e995a9e67601d5caca85a6279393e8a7535d06071c1cb8892c85f1ec9c6c7a_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:1dcaf6f017f0cf1d06f5626490fec03a29101f94ff4e88e487a81c6c403b5533_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:384e092f3affff6a2e7bf4b5a2c288046c32175d5a4f032905d6a2fcaff800d1_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a5a27f6ce4c81f82f91ef9b926e8ed134419357433ad84ba067483a518b572d2_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a7f6a9f55ead1030ce6fbc0fd991e5d4f5f7642a73e86605486eef6637036e08_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2502690"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Konnectivity proxy-server configuration for hosted control planes. The agent-facing listener was started without --cluster-ca-cert (and without token-based agent authentication), so client certificates were not validated. A remote attacker who can reach the Konnectivity cluster endpoint could connect as an unauthenticated agent, join the routing pool, and potentially proxy, inspect, modify, or drop control-plane-to-node traffic.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "hypershift: Konnectivity proxy-server accepts agent connections without validating client certificates",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw in the Konnectivity proxy-server used by hosted control planes allows a remote, unauthenticated attacker who can reach the agent-facing (cluster) endpoint to establish an agent connection without presenting a client certificate signed by the hosted cluster\u2019s Konnectivity CA, and without using token-based agent authentication. Because that endpoint is exposed so worker agents can connect, a successful attack can enroll an untrusted agent in the routing pool. When the proxy selects that stream for a control-plane dial, the attacker may proxy, inspect, modify, or drop control-plane-to-node traffic, affecting confidentiality, integrity, and availability of that path.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:0d1c736eb20d065e6c48a12902c87396f8babdea65207a838301dad0937c7e2e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:303de185a374a7d3a22eec6d10e1c8a178f68a33d0573b195fa8d9b40d67becc_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:84153090a97f4d2fd7c9136a40cf98d5bbc86acf9ae978d8ae17a731284d5aaf_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:cdea7b9a3878b0f1b087fc19587e91f6c35a1325e09efe411985f35c7af7a3d4_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:0866eb3d44068199d2511abb8d1ca782dd61dd66b13a6d0b72dbc727c2331ded_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:14580d43056d87cf84a2ce5f2fc7fa5ad3dd47745e53f431bff1203db20a7b77_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:5ee44d986d12f117a4b78bdef0e015e9dea12e8d80a6d981c38934cf7587a36b_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:65ee346de74922a3d3a15d8fdda96809bfdc7fedb332fd3be6b2bf7f0471e622_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:481789c068fba9b6bd657a2e193b33d6c4fb5c6cff0d0f63a7e55986e56d0eba_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:7414e957f7abbccb77a45b4bddcfc22b3b6d72077cc995226bc8874d5ae299f0_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:a9df2055d0d970ba40f5b2ed3cbf8a8418b60090fed5858a6cbce116e70917ae_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:e2033ab2cd2e3f98576c6cfea20297829adf40d3f7f50b6eac1a1a66e3295f4c_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:19806d3ba170fa6a9aaaf83b1c25dde1d20e7a07061dc04e931b37ce81996e3a_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:4ae0174eec7cff35f2ae0926d28975ad4d2f303c4c3259fc5e2b9deea91699ad_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:5438bb301dc7d71c1fc945bcfb0e966e0a96d38fc0a6ddb0fd40da43aa4a7282_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ef993089bcd3530c78589e14a11b8214bc98d444553156b59ea1fb2395550f6b_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:417a162d360d2da6bb1aec58f44a3400482fcaa9c535929e62676c1834524ead_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:44230e060120cd247e24f22e21b03423ac13b4f41f6eb081172f9be06f25c584_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:68d192c8b0b1fe78c82e9640cb734ac14b2321a8c710f88ac06bb87892fb2313_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:f18eef7c2dd973425a667f993bd8c3ed5b06acf098276d56d4840da210b11b2e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:3df178f2cdc1b46a0fb728b1ce65689052c1728cfacadd4ad95383017a625202_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:6b500dcb1d4dd390820c45b6c53cf5edc822e49dacd525fb4530ce904c09d8f1_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:683cd49dfc9a43c876db6cf94b9f7e417cee3f7bc0adbd320aa0cb924b817732_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:9a59698fa26507d2dac42c9d5add511fcb224a25bbc2b8d6c24f443ee8c28410_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:1833524376750ff3cf91d4e95eb6670180428c4d936520002a6cf27ecde777f1_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:57686feccedbbb655b36d5231aa69f47b0d77ff9c04203bb78218feb0367585e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:749150b69ff000b5f45a5c169ef58c2c67541f1f5caba7539a2e8e133abb122c_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:a3085627a26e2e6c6be38a3a6757523da4da6130a8517e6fc37076df6ee101f7_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:134def2853a731f3d51183c2efbd3d475cf64156dd3fec97cf84a2ff46f3297e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:32455bd12de20c48a129c30001ee8dadb6583182df7797ee6ace06e3a4a09547_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:4873d888ea06945c205c5d1810c0ab733fb1ecfd09a7479a57bdfa79b0a817f3_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:806df3b271c6ca7e964042117e47a09e6d8c6aa172b5413e6863381acc0b1202_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:0c0289461e7dc8ace658fee1c39f97e7718f563d903e103436da4359f8570b65_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:33578de6f34f30567f0b7d3b5cda88e441026c02fa3a404876672fe586313f73_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:5baa44685b91e787650260630be8ba4a375b89075ac0c2044028ec66b9e9fe85_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:d5e995a9e67601d5caca85a6279393e8a7535d06071c1cb8892c85f1ec9c6c7a_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:1dcaf6f017f0cf1d06f5626490fec03a29101f94ff4e88e487a81c6c403b5533_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:384e092f3affff6a2e7bf4b5a2c288046c32175d5a4f032905d6a2fcaff800d1_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a5a27f6ce4c81f82f91ef9b926e8ed134419357433ad84ba067483a518b572d2_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a7f6a9f55ead1030ce6fbc0fd991e5d4f5f7642a73e86605486eef6637036e08_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-16242"
},
{
"category": "external",
"summary": "RHBZ#2502690",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2502690"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-16242",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-16242"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-16242",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-16242"
},
{
"category": "external",
"summary": "https://github.com/openshift/hypershift/pull/9031",
"url": "https://github.com/openshift/hypershift/pull/9031"
}
],
"release_date": "2026-07-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T07:07:38+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:0bf08effa1f11a7afd1c21574a1d25b4004b12511fe790c651162074e48e06fe\n\n (For s390x architecture)\n The image digest is sha256:40eaec63a2f8e89c28026a764898b25620654f17fe2ccfc1cdd010762e1d8246\n\n (For ppc64le architecture)\n The image digest is sha256:09115b927b43a0327698fd02fc9d87f3999966bbd5f41bdeffccaabb84a2fac9\n\n (For aarch64 architecture)\n The image digest is sha256:44a25bbf10e6796842df3ff64d13e27ff5a942850eef28c1d3e0fb2bedf2b366\n\nAll OpenShift Container Platform 4.18 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:0d1c736eb20d065e6c48a12902c87396f8babdea65207a838301dad0937c7e2e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:303de185a374a7d3a22eec6d10e1c8a178f68a33d0573b195fa8d9b40d67becc_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:84153090a97f4d2fd7c9136a40cf98d5bbc86acf9ae978d8ae17a731284d5aaf_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:cdea7b9a3878b0f1b087fc19587e91f6c35a1325e09efe411985f35c7af7a3d4_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48699"
},
{
"category": "workaround",
"details": "Until an update that configures Konnectivity agent authentication is applied, restrict network access to the Konnectivity cluster (agent) endpoint so that only trusted worker networks can reach it. For NodePort or LoadBalancer publishing, limit ingress to port 8091 to worker node subnet ranges. For Route-based publishing, restrict access to the Konnectivity route to trusted networks where possible. These controls reduce the chance that an unauthenticated attacker can reach the agent listener; they do not replace proper agent client-certificate (or token) authentication.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:0866eb3d44068199d2511abb8d1ca782dd61dd66b13a6d0b72dbc727c2331ded_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:14580d43056d87cf84a2ce5f2fc7fa5ad3dd47745e53f431bff1203db20a7b77_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:5ee44d986d12f117a4b78bdef0e015e9dea12e8d80a6d981c38934cf7587a36b_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:65ee346de74922a3d3a15d8fdda96809bfdc7fedb332fd3be6b2bf7f0471e622_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:481789c068fba9b6bd657a2e193b33d6c4fb5c6cff0d0f63a7e55986e56d0eba_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:7414e957f7abbccb77a45b4bddcfc22b3b6d72077cc995226bc8874d5ae299f0_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:a9df2055d0d970ba40f5b2ed3cbf8a8418b60090fed5858a6cbce116e70917ae_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:e2033ab2cd2e3f98576c6cfea20297829adf40d3f7f50b6eac1a1a66e3295f4c_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:19806d3ba170fa6a9aaaf83b1c25dde1d20e7a07061dc04e931b37ce81996e3a_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:4ae0174eec7cff35f2ae0926d28975ad4d2f303c4c3259fc5e2b9deea91699ad_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:5438bb301dc7d71c1fc945bcfb0e966e0a96d38fc0a6ddb0fd40da43aa4a7282_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ef993089bcd3530c78589e14a11b8214bc98d444553156b59ea1fb2395550f6b_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:417a162d360d2da6bb1aec58f44a3400482fcaa9c535929e62676c1834524ead_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:44230e060120cd247e24f22e21b03423ac13b4f41f6eb081172f9be06f25c584_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:68d192c8b0b1fe78c82e9640cb734ac14b2321a8c710f88ac06bb87892fb2313_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:f18eef7c2dd973425a667f993bd8c3ed5b06acf098276d56d4840da210b11b2e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:0d1c736eb20d065e6c48a12902c87396f8babdea65207a838301dad0937c7e2e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:303de185a374a7d3a22eec6d10e1c8a178f68a33d0573b195fa8d9b40d67becc_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:84153090a97f4d2fd7c9136a40cf98d5bbc86acf9ae978d8ae17a731284d5aaf_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:cdea7b9a3878b0f1b087fc19587e91f6c35a1325e09efe411985f35c7af7a3d4_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:3df178f2cdc1b46a0fb728b1ce65689052c1728cfacadd4ad95383017a625202_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:6b500dcb1d4dd390820c45b6c53cf5edc822e49dacd525fb4530ce904c09d8f1_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:683cd49dfc9a43c876db6cf94b9f7e417cee3f7bc0adbd320aa0cb924b817732_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:9a59698fa26507d2dac42c9d5add511fcb224a25bbc2b8d6c24f443ee8c28410_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:1833524376750ff3cf91d4e95eb6670180428c4d936520002a6cf27ecde777f1_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:57686feccedbbb655b36d5231aa69f47b0d77ff9c04203bb78218feb0367585e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:749150b69ff000b5f45a5c169ef58c2c67541f1f5caba7539a2e8e133abb122c_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:a3085627a26e2e6c6be38a3a6757523da4da6130a8517e6fc37076df6ee101f7_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:134def2853a731f3d51183c2efbd3d475cf64156dd3fec97cf84a2ff46f3297e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:32455bd12de20c48a129c30001ee8dadb6583182df7797ee6ace06e3a4a09547_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:4873d888ea06945c205c5d1810c0ab733fb1ecfd09a7479a57bdfa79b0a817f3_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:806df3b271c6ca7e964042117e47a09e6d8c6aa172b5413e6863381acc0b1202_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:0c0289461e7dc8ace658fee1c39f97e7718f563d903e103436da4359f8570b65_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:33578de6f34f30567f0b7d3b5cda88e441026c02fa3a404876672fe586313f73_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:5baa44685b91e787650260630be8ba4a375b89075ac0c2044028ec66b9e9fe85_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:d5e995a9e67601d5caca85a6279393e8a7535d06071c1cb8892c85f1ec9c6c7a_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:1dcaf6f017f0cf1d06f5626490fec03a29101f94ff4e88e487a81c6c403b5533_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:384e092f3affff6a2e7bf4b5a2c288046c32175d5a4f032905d6a2fcaff800d1_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a5a27f6ce4c81f82f91ef9b926e8ed134419357433ad84ba067483a518b572d2_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a7f6a9f55ead1030ce6fbc0fd991e5d4f5f7642a73e86605486eef6637036e08_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 9.4,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:0866eb3d44068199d2511abb8d1ca782dd61dd66b13a6d0b72dbc727c2331ded_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:14580d43056d87cf84a2ce5f2fc7fa5ad3dd47745e53f431bff1203db20a7b77_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:5ee44d986d12f117a4b78bdef0e015e9dea12e8d80a6d981c38934cf7587a36b_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:65ee346de74922a3d3a15d8fdda96809bfdc7fedb332fd3be6b2bf7f0471e622_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:481789c068fba9b6bd657a2e193b33d6c4fb5c6cff0d0f63a7e55986e56d0eba_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:7414e957f7abbccb77a45b4bddcfc22b3b6d72077cc995226bc8874d5ae299f0_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:a9df2055d0d970ba40f5b2ed3cbf8a8418b60090fed5858a6cbce116e70917ae_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:e2033ab2cd2e3f98576c6cfea20297829adf40d3f7f50b6eac1a1a66e3295f4c_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:19806d3ba170fa6a9aaaf83b1c25dde1d20e7a07061dc04e931b37ce81996e3a_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:4ae0174eec7cff35f2ae0926d28975ad4d2f303c4c3259fc5e2b9deea91699ad_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:5438bb301dc7d71c1fc945bcfb0e966e0a96d38fc0a6ddb0fd40da43aa4a7282_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ef993089bcd3530c78589e14a11b8214bc98d444553156b59ea1fb2395550f6b_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:417a162d360d2da6bb1aec58f44a3400482fcaa9c535929e62676c1834524ead_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:44230e060120cd247e24f22e21b03423ac13b4f41f6eb081172f9be06f25c584_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:68d192c8b0b1fe78c82e9640cb734ac14b2321a8c710f88ac06bb87892fb2313_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:f18eef7c2dd973425a667f993bd8c3ed5b06acf098276d56d4840da210b11b2e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:0d1c736eb20d065e6c48a12902c87396f8babdea65207a838301dad0937c7e2e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:303de185a374a7d3a22eec6d10e1c8a178f68a33d0573b195fa8d9b40d67becc_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:84153090a97f4d2fd7c9136a40cf98d5bbc86acf9ae978d8ae17a731284d5aaf_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:cdea7b9a3878b0f1b087fc19587e91f6c35a1325e09efe411985f35c7af7a3d4_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:3df178f2cdc1b46a0fb728b1ce65689052c1728cfacadd4ad95383017a625202_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:6b500dcb1d4dd390820c45b6c53cf5edc822e49dacd525fb4530ce904c09d8f1_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:683cd49dfc9a43c876db6cf94b9f7e417cee3f7bc0adbd320aa0cb924b817732_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:9a59698fa26507d2dac42c9d5add511fcb224a25bbc2b8d6c24f443ee8c28410_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:1833524376750ff3cf91d4e95eb6670180428c4d936520002a6cf27ecde777f1_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:57686feccedbbb655b36d5231aa69f47b0d77ff9c04203bb78218feb0367585e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:749150b69ff000b5f45a5c169ef58c2c67541f1f5caba7539a2e8e133abb122c_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:a3085627a26e2e6c6be38a3a6757523da4da6130a8517e6fc37076df6ee101f7_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:134def2853a731f3d51183c2efbd3d475cf64156dd3fec97cf84a2ff46f3297e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:32455bd12de20c48a129c30001ee8dadb6583182df7797ee6ace06e3a4a09547_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:4873d888ea06945c205c5d1810c0ab733fb1ecfd09a7479a57bdfa79b0a817f3_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:806df3b271c6ca7e964042117e47a09e6d8c6aa172b5413e6863381acc0b1202_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:0c0289461e7dc8ace658fee1c39f97e7718f563d903e103436da4359f8570b65_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:33578de6f34f30567f0b7d3b5cda88e441026c02fa3a404876672fe586313f73_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:5baa44685b91e787650260630be8ba4a375b89075ac0c2044028ec66b9e9fe85_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:d5e995a9e67601d5caca85a6279393e8a7535d06071c1cb8892c85f1ec9c6c7a_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:1dcaf6f017f0cf1d06f5626490fec03a29101f94ff4e88e487a81c6c403b5533_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:384e092f3affff6a2e7bf4b5a2c288046c32175d5a4f032905d6a2fcaff800d1_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a5a27f6ce4c81f82f91ef9b926e8ed134419357433ad84ba067483a518b572d2_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a7f6a9f55ead1030ce6fbc0fd991e5d4f5f7642a73e86605486eef6637036e08_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Critical"
}
],
"title": "hypershift: Konnectivity proxy-server accepts agent connections without validating client certificates"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:0866eb3d44068199d2511abb8d1ca782dd61dd66b13a6d0b72dbc727c2331ded_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:14580d43056d87cf84a2ce5f2fc7fa5ad3dd47745e53f431bff1203db20a7b77_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:5ee44d986d12f117a4b78bdef0e015e9dea12e8d80a6d981c38934cf7587a36b_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:65ee346de74922a3d3a15d8fdda96809bfdc7fedb332fd3be6b2bf7f0471e622_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:19806d3ba170fa6a9aaaf83b1c25dde1d20e7a07061dc04e931b37ce81996e3a_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:4ae0174eec7cff35f2ae0926d28975ad4d2f303c4c3259fc5e2b9deea91699ad_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:5438bb301dc7d71c1fc945bcfb0e966e0a96d38fc0a6ddb0fd40da43aa4a7282_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ef993089bcd3530c78589e14a11b8214bc98d444553156b59ea1fb2395550f6b_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:417a162d360d2da6bb1aec58f44a3400482fcaa9c535929e62676c1834524ead_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:44230e060120cd247e24f22e21b03423ac13b4f41f6eb081172f9be06f25c584_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:68d192c8b0b1fe78c82e9640cb734ac14b2321a8c710f88ac06bb87892fb2313_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:f18eef7c2dd973425a667f993bd8c3ed5b06acf098276d56d4840da210b11b2e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:0d1c736eb20d065e6c48a12902c87396f8babdea65207a838301dad0937c7e2e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:303de185a374a7d3a22eec6d10e1c8a178f68a33d0573b195fa8d9b40d67becc_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:84153090a97f4d2fd7c9136a40cf98d5bbc86acf9ae978d8ae17a731284d5aaf_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:cdea7b9a3878b0f1b087fc19587e91f6c35a1325e09efe411985f35c7af7a3d4_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:3df178f2cdc1b46a0fb728b1ce65689052c1728cfacadd4ad95383017a625202_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:6b500dcb1d4dd390820c45b6c53cf5edc822e49dacd525fb4530ce904c09d8f1_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:683cd49dfc9a43c876db6cf94b9f7e417cee3f7bc0adbd320aa0cb924b817732_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:9a59698fa26507d2dac42c9d5add511fcb224a25bbc2b8d6c24f443ee8c28410_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:1833524376750ff3cf91d4e95eb6670180428c4d936520002a6cf27ecde777f1_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:57686feccedbbb655b36d5231aa69f47b0d77ff9c04203bb78218feb0367585e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:749150b69ff000b5f45a5c169ef58c2c67541f1f5caba7539a2e8e133abb122c_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:a3085627a26e2e6c6be38a3a6757523da4da6130a8517e6fc37076df6ee101f7_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:134def2853a731f3d51183c2efbd3d475cf64156dd3fec97cf84a2ff46f3297e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:32455bd12de20c48a129c30001ee8dadb6583182df7797ee6ace06e3a4a09547_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:4873d888ea06945c205c5d1810c0ab733fb1ecfd09a7479a57bdfa79b0a817f3_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:806df3b271c6ca7e964042117e47a09e6d8c6aa172b5413e6863381acc0b1202_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:0c0289461e7dc8ace658fee1c39f97e7718f563d903e103436da4359f8570b65_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:33578de6f34f30567f0b7d3b5cda88e441026c02fa3a404876672fe586313f73_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:5baa44685b91e787650260630be8ba4a375b89075ac0c2044028ec66b9e9fe85_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:d5e995a9e67601d5caca85a6279393e8a7535d06071c1cb8892c85f1ec9c6c7a_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:1dcaf6f017f0cf1d06f5626490fec03a29101f94ff4e88e487a81c6c403b5533_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:384e092f3affff6a2e7bf4b5a2c288046c32175d5a4f032905d6a2fcaff800d1_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a5a27f6ce4c81f82f91ef9b926e8ed134419357433ad84ba067483a518b572d2_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a7f6a9f55ead1030ce6fbc0fd991e5d4f5f7642a73e86605486eef6637036e08_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:481789c068fba9b6bd657a2e193b33d6c4fb5c6cff0d0f63a7e55986e56d0eba_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:7414e957f7abbccb77a45b4bddcfc22b3b6d72077cc995226bc8874d5ae299f0_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:a9df2055d0d970ba40f5b2ed3cbf8a8418b60090fed5858a6cbce116e70917ae_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:e2033ab2cd2e3f98576c6cfea20297829adf40d3f7f50b6eac1a1a66e3295f4c_ppc64le"
],
"known_not_affected": [
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:0866eb3d44068199d2511abb8d1ca782dd61dd66b13a6d0b72dbc727c2331ded_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:14580d43056d87cf84a2ce5f2fc7fa5ad3dd47745e53f431bff1203db20a7b77_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:5ee44d986d12f117a4b78bdef0e015e9dea12e8d80a6d981c38934cf7587a36b_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:65ee346de74922a3d3a15d8fdda96809bfdc7fedb332fd3be6b2bf7f0471e622_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:19806d3ba170fa6a9aaaf83b1c25dde1d20e7a07061dc04e931b37ce81996e3a_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:4ae0174eec7cff35f2ae0926d28975ad4d2f303c4c3259fc5e2b9deea91699ad_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:5438bb301dc7d71c1fc945bcfb0e966e0a96d38fc0a6ddb0fd40da43aa4a7282_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ef993089bcd3530c78589e14a11b8214bc98d444553156b59ea1fb2395550f6b_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:417a162d360d2da6bb1aec58f44a3400482fcaa9c535929e62676c1834524ead_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:44230e060120cd247e24f22e21b03423ac13b4f41f6eb081172f9be06f25c584_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:68d192c8b0b1fe78c82e9640cb734ac14b2321a8c710f88ac06bb87892fb2313_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:f18eef7c2dd973425a667f993bd8c3ed5b06acf098276d56d4840da210b11b2e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:0d1c736eb20d065e6c48a12902c87396f8babdea65207a838301dad0937c7e2e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:303de185a374a7d3a22eec6d10e1c8a178f68a33d0573b195fa8d9b40d67becc_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:84153090a97f4d2fd7c9136a40cf98d5bbc86acf9ae978d8ae17a731284d5aaf_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:cdea7b9a3878b0f1b087fc19587e91f6c35a1325e09efe411985f35c7af7a3d4_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:3df178f2cdc1b46a0fb728b1ce65689052c1728cfacadd4ad95383017a625202_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:6b500dcb1d4dd390820c45b6c53cf5edc822e49dacd525fb4530ce904c09d8f1_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:683cd49dfc9a43c876db6cf94b9f7e417cee3f7bc0adbd320aa0cb924b817732_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:9a59698fa26507d2dac42c9d5add511fcb224a25bbc2b8d6c24f443ee8c28410_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:1833524376750ff3cf91d4e95eb6670180428c4d936520002a6cf27ecde777f1_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:57686feccedbbb655b36d5231aa69f47b0d77ff9c04203bb78218feb0367585e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:749150b69ff000b5f45a5c169ef58c2c67541f1f5caba7539a2e8e133abb122c_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:a3085627a26e2e6c6be38a3a6757523da4da6130a8517e6fc37076df6ee101f7_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:134def2853a731f3d51183c2efbd3d475cf64156dd3fec97cf84a2ff46f3297e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:32455bd12de20c48a129c30001ee8dadb6583182df7797ee6ace06e3a4a09547_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:4873d888ea06945c205c5d1810c0ab733fb1ecfd09a7479a57bdfa79b0a817f3_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:806df3b271c6ca7e964042117e47a09e6d8c6aa172b5413e6863381acc0b1202_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:0c0289461e7dc8ace658fee1c39f97e7718f563d903e103436da4359f8570b65_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:33578de6f34f30567f0b7d3b5cda88e441026c02fa3a404876672fe586313f73_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:5baa44685b91e787650260630be8ba4a375b89075ac0c2044028ec66b9e9fe85_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:d5e995a9e67601d5caca85a6279393e8a7535d06071c1cb8892c85f1ec9c6c7a_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:1dcaf6f017f0cf1d06f5626490fec03a29101f94ff4e88e487a81c6c403b5533_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:384e092f3affff6a2e7bf4b5a2c288046c32175d5a4f032905d6a2fcaff800d1_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a5a27f6ce4c81f82f91ef9b926e8ed134419357433ad84ba067483a518b572d2_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a7f6a9f55ead1030ce6fbc0fd991e5d4f5f7642a73e86605486eef6637036e08_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T07:07:38+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:0bf08effa1f11a7afd1c21574a1d25b4004b12511fe790c651162074e48e06fe\n\n (For s390x architecture)\n The image digest is sha256:40eaec63a2f8e89c28026a764898b25620654f17fe2ccfc1cdd010762e1d8246\n\n (For ppc64le architecture)\n The image digest is sha256:09115b927b43a0327698fd02fc9d87f3999966bbd5f41bdeffccaabb84a2fac9\n\n (For aarch64 architecture)\n The image digest is sha256:44a25bbf10e6796842df3ff64d13e27ff5a942850eef28c1d3e0fb2bedf2b366\n\nAll OpenShift Container Platform 4.18 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:481789c068fba9b6bd657a2e193b33d6c4fb5c6cff0d0f63a7e55986e56d0eba_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:7414e957f7abbccb77a45b4bddcfc22b3b6d72077cc995226bc8874d5ae299f0_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:a9df2055d0d970ba40f5b2ed3cbf8a8418b60090fed5858a6cbce116e70917ae_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:e2033ab2cd2e3f98576c6cfea20297829adf40d3f7f50b6eac1a1a66e3295f4c_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48699"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:0866eb3d44068199d2511abb8d1ca782dd61dd66b13a6d0b72dbc727c2331ded_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:14580d43056d87cf84a2ce5f2fc7fa5ad3dd47745e53f431bff1203db20a7b77_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:5ee44d986d12f117a4b78bdef0e015e9dea12e8d80a6d981c38934cf7587a36b_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:65ee346de74922a3d3a15d8fdda96809bfdc7fedb332fd3be6b2bf7f0471e622_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:481789c068fba9b6bd657a2e193b33d6c4fb5c6cff0d0f63a7e55986e56d0eba_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:7414e957f7abbccb77a45b4bddcfc22b3b6d72077cc995226bc8874d5ae299f0_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:a9df2055d0d970ba40f5b2ed3cbf8a8418b60090fed5858a6cbce116e70917ae_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:e2033ab2cd2e3f98576c6cfea20297829adf40d3f7f50b6eac1a1a66e3295f4c_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:19806d3ba170fa6a9aaaf83b1c25dde1d20e7a07061dc04e931b37ce81996e3a_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:4ae0174eec7cff35f2ae0926d28975ad4d2f303c4c3259fc5e2b9deea91699ad_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:5438bb301dc7d71c1fc945bcfb0e966e0a96d38fc0a6ddb0fd40da43aa4a7282_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ef993089bcd3530c78589e14a11b8214bc98d444553156b59ea1fb2395550f6b_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:417a162d360d2da6bb1aec58f44a3400482fcaa9c535929e62676c1834524ead_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:44230e060120cd247e24f22e21b03423ac13b4f41f6eb081172f9be06f25c584_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:68d192c8b0b1fe78c82e9640cb734ac14b2321a8c710f88ac06bb87892fb2313_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:f18eef7c2dd973425a667f993bd8c3ed5b06acf098276d56d4840da210b11b2e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:0d1c736eb20d065e6c48a12902c87396f8babdea65207a838301dad0937c7e2e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:303de185a374a7d3a22eec6d10e1c8a178f68a33d0573b195fa8d9b40d67becc_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:84153090a97f4d2fd7c9136a40cf98d5bbc86acf9ae978d8ae17a731284d5aaf_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:cdea7b9a3878b0f1b087fc19587e91f6c35a1325e09efe411985f35c7af7a3d4_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:3df178f2cdc1b46a0fb728b1ce65689052c1728cfacadd4ad95383017a625202_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:6b500dcb1d4dd390820c45b6c53cf5edc822e49dacd525fb4530ce904c09d8f1_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:683cd49dfc9a43c876db6cf94b9f7e417cee3f7bc0adbd320aa0cb924b817732_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:9a59698fa26507d2dac42c9d5add511fcb224a25bbc2b8d6c24f443ee8c28410_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:1833524376750ff3cf91d4e95eb6670180428c4d936520002a6cf27ecde777f1_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:57686feccedbbb655b36d5231aa69f47b0d77ff9c04203bb78218feb0367585e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:749150b69ff000b5f45a5c169ef58c2c67541f1f5caba7539a2e8e133abb122c_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:a3085627a26e2e6c6be38a3a6757523da4da6130a8517e6fc37076df6ee101f7_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:134def2853a731f3d51183c2efbd3d475cf64156dd3fec97cf84a2ff46f3297e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:32455bd12de20c48a129c30001ee8dadb6583182df7797ee6ace06e3a4a09547_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:4873d888ea06945c205c5d1810c0ab733fb1ecfd09a7479a57bdfa79b0a817f3_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:806df3b271c6ca7e964042117e47a09e6d8c6aa172b5413e6863381acc0b1202_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:0c0289461e7dc8ace658fee1c39f97e7718f563d903e103436da4359f8570b65_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:33578de6f34f30567f0b7d3b5cda88e441026c02fa3a404876672fe586313f73_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:5baa44685b91e787650260630be8ba4a375b89075ac0c2044028ec66b9e9fe85_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:d5e995a9e67601d5caca85a6279393e8a7535d06071c1cb8892c85f1ec9c6c7a_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:1dcaf6f017f0cf1d06f5626490fec03a29101f94ff4e88e487a81c6c403b5533_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:384e092f3affff6a2e7bf4b5a2c288046c32175d5a4f032905d6a2fcaff800d1_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a5a27f6ce4c81f82f91ef9b926e8ed134419357433ad84ba067483a518b572d2_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a7f6a9f55ead1030ce6fbc0fd991e5d4f5f7642a73e86605486eef6637036e08_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:0866eb3d44068199d2511abb8d1ca782dd61dd66b13a6d0b72dbc727c2331ded_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:14580d43056d87cf84a2ce5f2fc7fa5ad3dd47745e53f431bff1203db20a7b77_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:5ee44d986d12f117a4b78bdef0e015e9dea12e8d80a6d981c38934cf7587a36b_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:65ee346de74922a3d3a15d8fdda96809bfdc7fedb332fd3be6b2bf7f0471e622_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:481789c068fba9b6bd657a2e193b33d6c4fb5c6cff0d0f63a7e55986e56d0eba_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:7414e957f7abbccb77a45b4bddcfc22b3b6d72077cc995226bc8874d5ae299f0_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:a9df2055d0d970ba40f5b2ed3cbf8a8418b60090fed5858a6cbce116e70917ae_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:e2033ab2cd2e3f98576c6cfea20297829adf40d3f7f50b6eac1a1a66e3295f4c_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:19806d3ba170fa6a9aaaf83b1c25dde1d20e7a07061dc04e931b37ce81996e3a_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:4ae0174eec7cff35f2ae0926d28975ad4d2f303c4c3259fc5e2b9deea91699ad_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:5438bb301dc7d71c1fc945bcfb0e966e0a96d38fc0a6ddb0fd40da43aa4a7282_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ef993089bcd3530c78589e14a11b8214bc98d444553156b59ea1fb2395550f6b_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:417a162d360d2da6bb1aec58f44a3400482fcaa9c535929e62676c1834524ead_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:44230e060120cd247e24f22e21b03423ac13b4f41f6eb081172f9be06f25c584_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:68d192c8b0b1fe78c82e9640cb734ac14b2321a8c710f88ac06bb87892fb2313_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:f18eef7c2dd973425a667f993bd8c3ed5b06acf098276d56d4840da210b11b2e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:0d1c736eb20d065e6c48a12902c87396f8babdea65207a838301dad0937c7e2e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:303de185a374a7d3a22eec6d10e1c8a178f68a33d0573b195fa8d9b40d67becc_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:84153090a97f4d2fd7c9136a40cf98d5bbc86acf9ae978d8ae17a731284d5aaf_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:cdea7b9a3878b0f1b087fc19587e91f6c35a1325e09efe411985f35c7af7a3d4_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:3df178f2cdc1b46a0fb728b1ce65689052c1728cfacadd4ad95383017a625202_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:6b500dcb1d4dd390820c45b6c53cf5edc822e49dacd525fb4530ce904c09d8f1_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:683cd49dfc9a43c876db6cf94b9f7e417cee3f7bc0adbd320aa0cb924b817732_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:9a59698fa26507d2dac42c9d5add511fcb224a25bbc2b8d6c24f443ee8c28410_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:1833524376750ff3cf91d4e95eb6670180428c4d936520002a6cf27ecde777f1_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:57686feccedbbb655b36d5231aa69f47b0d77ff9c04203bb78218feb0367585e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:749150b69ff000b5f45a5c169ef58c2c67541f1f5caba7539a2e8e133abb122c_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:a3085627a26e2e6c6be38a3a6757523da4da6130a8517e6fc37076df6ee101f7_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:134def2853a731f3d51183c2efbd3d475cf64156dd3fec97cf84a2ff46f3297e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:32455bd12de20c48a129c30001ee8dadb6583182df7797ee6ace06e3a4a09547_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:4873d888ea06945c205c5d1810c0ab733fb1ecfd09a7479a57bdfa79b0a817f3_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:806df3b271c6ca7e964042117e47a09e6d8c6aa172b5413e6863381acc0b1202_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:0c0289461e7dc8ace658fee1c39f97e7718f563d903e103436da4359f8570b65_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:33578de6f34f30567f0b7d3b5cda88e441026c02fa3a404876672fe586313f73_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:5baa44685b91e787650260630be8ba4a375b89075ac0c2044028ec66b9e9fe85_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:d5e995a9e67601d5caca85a6279393e8a7535d06071c1cb8892c85f1ec9c6c7a_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:1dcaf6f017f0cf1d06f5626490fec03a29101f94ff4e88e487a81c6c403b5533_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:384e092f3affff6a2e7bf4b5a2c288046c32175d5a4f032905d6a2fcaff800d1_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a5a27f6ce4c81f82f91ef9b926e8ed134419357433ad84ba067483a518b572d2_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a7f6a9f55ead1030ce6fbc0fd991e5d4f5f7642a73e86605486eef6637036e08_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-40895",
"cwe": {
"id": "CWE-212",
"name": "Improper Removal of Sensitive Information Before Storage or Transfer"
},
"discovery_date": "2026-04-21T21:02:33.280553+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:0866eb3d44068199d2511abb8d1ca782dd61dd66b13a6d0b72dbc727c2331ded_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:14580d43056d87cf84a2ce5f2fc7fa5ad3dd47745e53f431bff1203db20a7b77_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:5ee44d986d12f117a4b78bdef0e015e9dea12e8d80a6d981c38934cf7587a36b_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:65ee346de74922a3d3a15d8fdda96809bfdc7fedb332fd3be6b2bf7f0471e622_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:481789c068fba9b6bd657a2e193b33d6c4fb5c6cff0d0f63a7e55986e56d0eba_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:7414e957f7abbccb77a45b4bddcfc22b3b6d72077cc995226bc8874d5ae299f0_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:a9df2055d0d970ba40f5b2ed3cbf8a8418b60090fed5858a6cbce116e70917ae_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:e2033ab2cd2e3f98576c6cfea20297829adf40d3f7f50b6eac1a1a66e3295f4c_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:19806d3ba170fa6a9aaaf83b1c25dde1d20e7a07061dc04e931b37ce81996e3a_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:4ae0174eec7cff35f2ae0926d28975ad4d2f303c4c3259fc5e2b9deea91699ad_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:5438bb301dc7d71c1fc945bcfb0e966e0a96d38fc0a6ddb0fd40da43aa4a7282_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ef993089bcd3530c78589e14a11b8214bc98d444553156b59ea1fb2395550f6b_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:0d1c736eb20d065e6c48a12902c87396f8babdea65207a838301dad0937c7e2e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:303de185a374a7d3a22eec6d10e1c8a178f68a33d0573b195fa8d9b40d67becc_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:84153090a97f4d2fd7c9136a40cf98d5bbc86acf9ae978d8ae17a731284d5aaf_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:cdea7b9a3878b0f1b087fc19587e91f6c35a1325e09efe411985f35c7af7a3d4_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:3df178f2cdc1b46a0fb728b1ce65689052c1728cfacadd4ad95383017a625202_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:6b500dcb1d4dd390820c45b6c53cf5edc822e49dacd525fb4530ce904c09d8f1_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:683cd49dfc9a43c876db6cf94b9f7e417cee3f7bc0adbd320aa0cb924b817732_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:9a59698fa26507d2dac42c9d5add511fcb224a25bbc2b8d6c24f443ee8c28410_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:1833524376750ff3cf91d4e95eb6670180428c4d936520002a6cf27ecde777f1_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:57686feccedbbb655b36d5231aa69f47b0d77ff9c04203bb78218feb0367585e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:749150b69ff000b5f45a5c169ef58c2c67541f1f5caba7539a2e8e133abb122c_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:a3085627a26e2e6c6be38a3a6757523da4da6130a8517e6fc37076df6ee101f7_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:134def2853a731f3d51183c2efbd3d475cf64156dd3fec97cf84a2ff46f3297e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:32455bd12de20c48a129c30001ee8dadb6583182df7797ee6ace06e3a4a09547_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:4873d888ea06945c205c5d1810c0ab733fb1ecfd09a7479a57bdfa79b0a817f3_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:806df3b271c6ca7e964042117e47a09e6d8c6aa172b5413e6863381acc0b1202_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:0c0289461e7dc8ace658fee1c39f97e7718f563d903e103436da4359f8570b65_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:33578de6f34f30567f0b7d3b5cda88e441026c02fa3a404876672fe586313f73_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:5baa44685b91e787650260630be8ba4a375b89075ac0c2044028ec66b9e9fe85_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:d5e995a9e67601d5caca85a6279393e8a7535d06071c1cb8892c85f1ec9c6c7a_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:1dcaf6f017f0cf1d06f5626490fec03a29101f94ff4e88e487a81c6c403b5533_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:384e092f3affff6a2e7bf4b5a2c288046c32175d5a4f032905d6a2fcaff800d1_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a5a27f6ce4c81f82f91ef9b926e8ed134419357433ad84ba067483a518b572d2_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a7f6a9f55ead1030ce6fbc0fd991e5d4f5f7642a73e86605486eef6637036e08_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2460297"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in follow-redirects. When an HTTP request follows a cross-domain redirect (a redirection to a different domain), custom authentication headers, such as X-API-Key or X-Auth-Token, are not properly stripped. This allows these sensitive headers to be forwarded verbatim to the redirect target, potentially leading to the unintended disclosure of authentication information to an untrusted third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "follow-redirects: follow-redirects: Information disclosure via cross-domain redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:417a162d360d2da6bb1aec58f44a3400482fcaa9c535929e62676c1834524ead_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:44230e060120cd247e24f22e21b03423ac13b4f41f6eb081172f9be06f25c584_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:68d192c8b0b1fe78c82e9640cb734ac14b2321a8c710f88ac06bb87892fb2313_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:f18eef7c2dd973425a667f993bd8c3ed5b06acf098276d56d4840da210b11b2e_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:0866eb3d44068199d2511abb8d1ca782dd61dd66b13a6d0b72dbc727c2331ded_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:14580d43056d87cf84a2ce5f2fc7fa5ad3dd47745e53f431bff1203db20a7b77_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:5ee44d986d12f117a4b78bdef0e015e9dea12e8d80a6d981c38934cf7587a36b_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:65ee346de74922a3d3a15d8fdda96809bfdc7fedb332fd3be6b2bf7f0471e622_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:481789c068fba9b6bd657a2e193b33d6c4fb5c6cff0d0f63a7e55986e56d0eba_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:7414e957f7abbccb77a45b4bddcfc22b3b6d72077cc995226bc8874d5ae299f0_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:a9df2055d0d970ba40f5b2ed3cbf8a8418b60090fed5858a6cbce116e70917ae_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:e2033ab2cd2e3f98576c6cfea20297829adf40d3f7f50b6eac1a1a66e3295f4c_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:19806d3ba170fa6a9aaaf83b1c25dde1d20e7a07061dc04e931b37ce81996e3a_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:4ae0174eec7cff35f2ae0926d28975ad4d2f303c4c3259fc5e2b9deea91699ad_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:5438bb301dc7d71c1fc945bcfb0e966e0a96d38fc0a6ddb0fd40da43aa4a7282_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ef993089bcd3530c78589e14a11b8214bc98d444553156b59ea1fb2395550f6b_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:0d1c736eb20d065e6c48a12902c87396f8babdea65207a838301dad0937c7e2e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:303de185a374a7d3a22eec6d10e1c8a178f68a33d0573b195fa8d9b40d67becc_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:84153090a97f4d2fd7c9136a40cf98d5bbc86acf9ae978d8ae17a731284d5aaf_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:cdea7b9a3878b0f1b087fc19587e91f6c35a1325e09efe411985f35c7af7a3d4_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:3df178f2cdc1b46a0fb728b1ce65689052c1728cfacadd4ad95383017a625202_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:6b500dcb1d4dd390820c45b6c53cf5edc822e49dacd525fb4530ce904c09d8f1_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:683cd49dfc9a43c876db6cf94b9f7e417cee3f7bc0adbd320aa0cb924b817732_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:9a59698fa26507d2dac42c9d5add511fcb224a25bbc2b8d6c24f443ee8c28410_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:1833524376750ff3cf91d4e95eb6670180428c4d936520002a6cf27ecde777f1_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:57686feccedbbb655b36d5231aa69f47b0d77ff9c04203bb78218feb0367585e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:749150b69ff000b5f45a5c169ef58c2c67541f1f5caba7539a2e8e133abb122c_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:a3085627a26e2e6c6be38a3a6757523da4da6130a8517e6fc37076df6ee101f7_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:134def2853a731f3d51183c2efbd3d475cf64156dd3fec97cf84a2ff46f3297e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:32455bd12de20c48a129c30001ee8dadb6583182df7797ee6ace06e3a4a09547_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:4873d888ea06945c205c5d1810c0ab733fb1ecfd09a7479a57bdfa79b0a817f3_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:806df3b271c6ca7e964042117e47a09e6d8c6aa172b5413e6863381acc0b1202_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:0c0289461e7dc8ace658fee1c39f97e7718f563d903e103436da4359f8570b65_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:33578de6f34f30567f0b7d3b5cda88e441026c02fa3a404876672fe586313f73_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:5baa44685b91e787650260630be8ba4a375b89075ac0c2044028ec66b9e9fe85_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:d5e995a9e67601d5caca85a6279393e8a7535d06071c1cb8892c85f1ec9c6c7a_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:1dcaf6f017f0cf1d06f5626490fec03a29101f94ff4e88e487a81c6c403b5533_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:384e092f3affff6a2e7bf4b5a2c288046c32175d5a4f032905d6a2fcaff800d1_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a5a27f6ce4c81f82f91ef9b926e8ed134419357433ad84ba067483a518b572d2_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a7f6a9f55ead1030ce6fbc0fd991e5d4f5f7642a73e86605486eef6637036e08_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40895"
},
{
"category": "external",
"summary": "RHBZ#2460297",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460297"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40895",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40895"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40895",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40895"
},
{
"category": "external",
"summary": "https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-r4q5-vmmm-2653",
"url": "https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-r4q5-vmmm-2653"
}
],
"release_date": "2026-04-21T19:59:59.759000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T07:07:38+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:0bf08effa1f11a7afd1c21574a1d25b4004b12511fe790c651162074e48e06fe\n\n (For s390x architecture)\n The image digest is sha256:40eaec63a2f8e89c28026a764898b25620654f17fe2ccfc1cdd010762e1d8246\n\n (For ppc64le architecture)\n The image digest is sha256:09115b927b43a0327698fd02fc9d87f3999966bbd5f41bdeffccaabb84a2fac9\n\n (For aarch64 architecture)\n The image digest is sha256:44a25bbf10e6796842df3ff64d13e27ff5a942850eef28c1d3e0fb2bedf2b366\n\nAll OpenShift Container Platform 4.18 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:417a162d360d2da6bb1aec58f44a3400482fcaa9c535929e62676c1834524ead_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:44230e060120cd247e24f22e21b03423ac13b4f41f6eb081172f9be06f25c584_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:68d192c8b0b1fe78c82e9640cb734ac14b2321a8c710f88ac06bb87892fb2313_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:f18eef7c2dd973425a667f993bd8c3ed5b06acf098276d56d4840da210b11b2e_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48699"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:0866eb3d44068199d2511abb8d1ca782dd61dd66b13a6d0b72dbc727c2331ded_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:14580d43056d87cf84a2ce5f2fc7fa5ad3dd47745e53f431bff1203db20a7b77_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:5ee44d986d12f117a4b78bdef0e015e9dea12e8d80a6d981c38934cf7587a36b_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:65ee346de74922a3d3a15d8fdda96809bfdc7fedb332fd3be6b2bf7f0471e622_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:481789c068fba9b6bd657a2e193b33d6c4fb5c6cff0d0f63a7e55986e56d0eba_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:7414e957f7abbccb77a45b4bddcfc22b3b6d72077cc995226bc8874d5ae299f0_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:a9df2055d0d970ba40f5b2ed3cbf8a8418b60090fed5858a6cbce116e70917ae_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:e2033ab2cd2e3f98576c6cfea20297829adf40d3f7f50b6eac1a1a66e3295f4c_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:19806d3ba170fa6a9aaaf83b1c25dde1d20e7a07061dc04e931b37ce81996e3a_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:4ae0174eec7cff35f2ae0926d28975ad4d2f303c4c3259fc5e2b9deea91699ad_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:5438bb301dc7d71c1fc945bcfb0e966e0a96d38fc0a6ddb0fd40da43aa4a7282_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ef993089bcd3530c78589e14a11b8214bc98d444553156b59ea1fb2395550f6b_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:417a162d360d2da6bb1aec58f44a3400482fcaa9c535929e62676c1834524ead_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:44230e060120cd247e24f22e21b03423ac13b4f41f6eb081172f9be06f25c584_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:68d192c8b0b1fe78c82e9640cb734ac14b2321a8c710f88ac06bb87892fb2313_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:f18eef7c2dd973425a667f993bd8c3ed5b06acf098276d56d4840da210b11b2e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:0d1c736eb20d065e6c48a12902c87396f8babdea65207a838301dad0937c7e2e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:303de185a374a7d3a22eec6d10e1c8a178f68a33d0573b195fa8d9b40d67becc_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:84153090a97f4d2fd7c9136a40cf98d5bbc86acf9ae978d8ae17a731284d5aaf_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:cdea7b9a3878b0f1b087fc19587e91f6c35a1325e09efe411985f35c7af7a3d4_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:3df178f2cdc1b46a0fb728b1ce65689052c1728cfacadd4ad95383017a625202_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:6b500dcb1d4dd390820c45b6c53cf5edc822e49dacd525fb4530ce904c09d8f1_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:683cd49dfc9a43c876db6cf94b9f7e417cee3f7bc0adbd320aa0cb924b817732_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:9a59698fa26507d2dac42c9d5add511fcb224a25bbc2b8d6c24f443ee8c28410_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:1833524376750ff3cf91d4e95eb6670180428c4d936520002a6cf27ecde777f1_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:57686feccedbbb655b36d5231aa69f47b0d77ff9c04203bb78218feb0367585e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:749150b69ff000b5f45a5c169ef58c2c67541f1f5caba7539a2e8e133abb122c_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:a3085627a26e2e6c6be38a3a6757523da4da6130a8517e6fc37076df6ee101f7_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:134def2853a731f3d51183c2efbd3d475cf64156dd3fec97cf84a2ff46f3297e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:32455bd12de20c48a129c30001ee8dadb6583182df7797ee6ace06e3a4a09547_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:4873d888ea06945c205c5d1810c0ab733fb1ecfd09a7479a57bdfa79b0a817f3_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:806df3b271c6ca7e964042117e47a09e6d8c6aa172b5413e6863381acc0b1202_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:0c0289461e7dc8ace658fee1c39f97e7718f563d903e103436da4359f8570b65_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:33578de6f34f30567f0b7d3b5cda88e441026c02fa3a404876672fe586313f73_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:5baa44685b91e787650260630be8ba4a375b89075ac0c2044028ec66b9e9fe85_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:d5e995a9e67601d5caca85a6279393e8a7535d06071c1cb8892c85f1ec9c6c7a_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:1dcaf6f017f0cf1d06f5626490fec03a29101f94ff4e88e487a81c6c403b5533_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:384e092f3affff6a2e7bf4b5a2c288046c32175d5a4f032905d6a2fcaff800d1_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a5a27f6ce4c81f82f91ef9b926e8ed134419357433ad84ba067483a518b572d2_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a7f6a9f55ead1030ce6fbc0fd991e5d4f5f7642a73e86605486eef6637036e08_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "follow-redirects: follow-redirects: Information disclosure via cross-domain redirects"
},
{
"cve": "CVE-2026-42154",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-04T19:02:19.626646+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:0866eb3d44068199d2511abb8d1ca782dd61dd66b13a6d0b72dbc727c2331ded_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:14580d43056d87cf84a2ce5f2fc7fa5ad3dd47745e53f431bff1203db20a7b77_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:5ee44d986d12f117a4b78bdef0e015e9dea12e8d80a6d981c38934cf7587a36b_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:65ee346de74922a3d3a15d8fdda96809bfdc7fedb332fd3be6b2bf7f0471e622_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:481789c068fba9b6bd657a2e193b33d6c4fb5c6cff0d0f63a7e55986e56d0eba_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:7414e957f7abbccb77a45b4bddcfc22b3b6d72077cc995226bc8874d5ae299f0_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:a9df2055d0d970ba40f5b2ed3cbf8a8418b60090fed5858a6cbce116e70917ae_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:e2033ab2cd2e3f98576c6cfea20297829adf40d3f7f50b6eac1a1a66e3295f4c_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:19806d3ba170fa6a9aaaf83b1c25dde1d20e7a07061dc04e931b37ce81996e3a_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:4ae0174eec7cff35f2ae0926d28975ad4d2f303c4c3259fc5e2b9deea91699ad_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:5438bb301dc7d71c1fc945bcfb0e966e0a96d38fc0a6ddb0fd40da43aa4a7282_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ef993089bcd3530c78589e14a11b8214bc98d444553156b59ea1fb2395550f6b_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:417a162d360d2da6bb1aec58f44a3400482fcaa9c535929e62676c1834524ead_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:44230e060120cd247e24f22e21b03423ac13b4f41f6eb081172f9be06f25c584_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:68d192c8b0b1fe78c82e9640cb734ac14b2321a8c710f88ac06bb87892fb2313_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:f18eef7c2dd973425a667f993bd8c3ed5b06acf098276d56d4840da210b11b2e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:0d1c736eb20d065e6c48a12902c87396f8babdea65207a838301dad0937c7e2e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:303de185a374a7d3a22eec6d10e1c8a178f68a33d0573b195fa8d9b40d67becc_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:84153090a97f4d2fd7c9136a40cf98d5bbc86acf9ae978d8ae17a731284d5aaf_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:cdea7b9a3878b0f1b087fc19587e91f6c35a1325e09efe411985f35c7af7a3d4_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:3df178f2cdc1b46a0fb728b1ce65689052c1728cfacadd4ad95383017a625202_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:6b500dcb1d4dd390820c45b6c53cf5edc822e49dacd525fb4530ce904c09d8f1_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:683cd49dfc9a43c876db6cf94b9f7e417cee3f7bc0adbd320aa0cb924b817732_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:9a59698fa26507d2dac42c9d5add511fcb224a25bbc2b8d6c24f443ee8c28410_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:1833524376750ff3cf91d4e95eb6670180428c4d936520002a6cf27ecde777f1_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:57686feccedbbb655b36d5231aa69f47b0d77ff9c04203bb78218feb0367585e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:749150b69ff000b5f45a5c169ef58c2c67541f1f5caba7539a2e8e133abb122c_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:a3085627a26e2e6c6be38a3a6757523da4da6130a8517e6fc37076df6ee101f7_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:134def2853a731f3d51183c2efbd3d475cf64156dd3fec97cf84a2ff46f3297e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:32455bd12de20c48a129c30001ee8dadb6583182df7797ee6ace06e3a4a09547_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:4873d888ea06945c205c5d1810c0ab733fb1ecfd09a7479a57bdfa79b0a817f3_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:806df3b271c6ca7e964042117e47a09e6d8c6aa172b5413e6863381acc0b1202_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:0c0289461e7dc8ace658fee1c39f97e7718f563d903e103436da4359f8570b65_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:33578de6f34f30567f0b7d3b5cda88e441026c02fa3a404876672fe586313f73_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:5baa44685b91e787650260630be8ba4a375b89075ac0c2044028ec66b9e9fe85_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:d5e995a9e67601d5caca85a6279393e8a7535d06071c1cb8892c85f1ec9c6c7a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466505"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus. An unauthenticated attacker can exploit the remote read endpoint (`/api/v1/read`) by sending a specially crafted, small snappy-compressed payload. This payload causes a disproportionately large memory allocation, leading to memory exhaustion and a Denial of Service (DoS) by crashing the Prometheus process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Prometheus, allowing an unauthenticated remote attacker to crash the Prometheus process. This could lead to service unavailability in Red Hat products that deploy Prometheus for monitoring, as the remote read endpoint does not properly validate snappy-compressed request lengths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:1dcaf6f017f0cf1d06f5626490fec03a29101f94ff4e88e487a81c6c403b5533_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:384e092f3affff6a2e7bf4b5a2c288046c32175d5a4f032905d6a2fcaff800d1_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a5a27f6ce4c81f82f91ef9b926e8ed134419357433ad84ba067483a518b572d2_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a7f6a9f55ead1030ce6fbc0fd991e5d4f5f7642a73e86605486eef6637036e08_s390x"
],
"known_not_affected": [
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:0866eb3d44068199d2511abb8d1ca782dd61dd66b13a6d0b72dbc727c2331ded_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:14580d43056d87cf84a2ce5f2fc7fa5ad3dd47745e53f431bff1203db20a7b77_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:5ee44d986d12f117a4b78bdef0e015e9dea12e8d80a6d981c38934cf7587a36b_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:65ee346de74922a3d3a15d8fdda96809bfdc7fedb332fd3be6b2bf7f0471e622_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:481789c068fba9b6bd657a2e193b33d6c4fb5c6cff0d0f63a7e55986e56d0eba_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:7414e957f7abbccb77a45b4bddcfc22b3b6d72077cc995226bc8874d5ae299f0_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:a9df2055d0d970ba40f5b2ed3cbf8a8418b60090fed5858a6cbce116e70917ae_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:e2033ab2cd2e3f98576c6cfea20297829adf40d3f7f50b6eac1a1a66e3295f4c_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:19806d3ba170fa6a9aaaf83b1c25dde1d20e7a07061dc04e931b37ce81996e3a_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:4ae0174eec7cff35f2ae0926d28975ad4d2f303c4c3259fc5e2b9deea91699ad_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:5438bb301dc7d71c1fc945bcfb0e966e0a96d38fc0a6ddb0fd40da43aa4a7282_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ef993089bcd3530c78589e14a11b8214bc98d444553156b59ea1fb2395550f6b_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:417a162d360d2da6bb1aec58f44a3400482fcaa9c535929e62676c1834524ead_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:44230e060120cd247e24f22e21b03423ac13b4f41f6eb081172f9be06f25c584_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:68d192c8b0b1fe78c82e9640cb734ac14b2321a8c710f88ac06bb87892fb2313_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:f18eef7c2dd973425a667f993bd8c3ed5b06acf098276d56d4840da210b11b2e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:0d1c736eb20d065e6c48a12902c87396f8babdea65207a838301dad0937c7e2e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:303de185a374a7d3a22eec6d10e1c8a178f68a33d0573b195fa8d9b40d67becc_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:84153090a97f4d2fd7c9136a40cf98d5bbc86acf9ae978d8ae17a731284d5aaf_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:cdea7b9a3878b0f1b087fc19587e91f6c35a1325e09efe411985f35c7af7a3d4_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:3df178f2cdc1b46a0fb728b1ce65689052c1728cfacadd4ad95383017a625202_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:6b500dcb1d4dd390820c45b6c53cf5edc822e49dacd525fb4530ce904c09d8f1_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:683cd49dfc9a43c876db6cf94b9f7e417cee3f7bc0adbd320aa0cb924b817732_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:9a59698fa26507d2dac42c9d5add511fcb224a25bbc2b8d6c24f443ee8c28410_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:1833524376750ff3cf91d4e95eb6670180428c4d936520002a6cf27ecde777f1_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:57686feccedbbb655b36d5231aa69f47b0d77ff9c04203bb78218feb0367585e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:749150b69ff000b5f45a5c169ef58c2c67541f1f5caba7539a2e8e133abb122c_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:a3085627a26e2e6c6be38a3a6757523da4da6130a8517e6fc37076df6ee101f7_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:134def2853a731f3d51183c2efbd3d475cf64156dd3fec97cf84a2ff46f3297e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:32455bd12de20c48a129c30001ee8dadb6583182df7797ee6ace06e3a4a09547_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:4873d888ea06945c205c5d1810c0ab733fb1ecfd09a7479a57bdfa79b0a817f3_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:806df3b271c6ca7e964042117e47a09e6d8c6aa172b5413e6863381acc0b1202_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:0c0289461e7dc8ace658fee1c39f97e7718f563d903e103436da4359f8570b65_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:33578de6f34f30567f0b7d3b5cda88e441026c02fa3a404876672fe586313f73_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:5baa44685b91e787650260630be8ba4a375b89075ac0c2044028ec66b9e9fe85_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:d5e995a9e67601d5caca85a6279393e8a7535d06071c1cb8892c85f1ec9c6c7a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42154"
},
{
"category": "external",
"summary": "RHBZ#2466505",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466505"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42154",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42154"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42154"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18584",
"url": "https://github.com/prometheus/prometheus/pull/18584"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18585",
"url": "https://github.com/prometheus/prometheus/pull/18585"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-8rm2-7qqf-34qm"
}
],
"release_date": "2026-05-04T18:13:12.340000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T07:07:38+00:00",
"details": "For OpenShift Container Platform 4.18 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:0bf08effa1f11a7afd1c21574a1d25b4004b12511fe790c651162074e48e06fe\n\n (For s390x architecture)\n The image digest is sha256:40eaec63a2f8e89c28026a764898b25620654f17fe2ccfc1cdd010762e1d8246\n\n (For ppc64le architecture)\n The image digest is sha256:09115b927b43a0327698fd02fc9d87f3999966bbd5f41bdeffccaabb84a2fac9\n\n (For aarch64 architecture)\n The image digest is sha256:44a25bbf10e6796842df3ff64d13e27ff5a942850eef28c1d3e0fb2bedf2b366\n\nAll OpenShift Container Platform 4.18 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.18/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:1dcaf6f017f0cf1d06f5626490fec03a29101f94ff4e88e487a81c6c403b5533_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:384e092f3affff6a2e7bf4b5a2c288046c32175d5a4f032905d6a2fcaff800d1_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a5a27f6ce4c81f82f91ef9b926e8ed134419357433ad84ba067483a518b572d2_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a7f6a9f55ead1030ce6fbc0fd991e5d4f5f7642a73e86605486eef6637036e08_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48699"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:0866eb3d44068199d2511abb8d1ca782dd61dd66b13a6d0b72dbc727c2331ded_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:14580d43056d87cf84a2ce5f2fc7fa5ad3dd47745e53f431bff1203db20a7b77_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:5ee44d986d12f117a4b78bdef0e015e9dea12e8d80a6d981c38934cf7587a36b_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/driver-toolkit-rhel9@sha256:65ee346de74922a3d3a15d8fdda96809bfdc7fedb332fd3be6b2bf7f0471e622_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:481789c068fba9b6bd657a2e193b33d6c4fb5c6cff0d0f63a7e55986e56d0eba_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:7414e957f7abbccb77a45b4bddcfc22b3b6d72077cc995226bc8874d5ae299f0_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:a9df2055d0d970ba40f5b2ed3cbf8a8418b60090fed5858a6cbce116e70917ae_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cloud-credential-rhel9-operator@sha256:e2033ab2cd2e3f98576c6cfea20297829adf40d3f7f50b6eac1a1a66e3295f4c_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:19806d3ba170fa6a9aaaf83b1c25dde1d20e7a07061dc04e931b37ce81996e3a_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:4ae0174eec7cff35f2ae0926d28975ad4d2f303c4c3259fc5e2b9deea91699ad_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:5438bb301dc7d71c1fc945bcfb0e966e0a96d38fc0a6ddb0fd40da43aa4a7282_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:ef993089bcd3530c78589e14a11b8214bc98d444553156b59ea1fb2395550f6b_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:417a162d360d2da6bb1aec58f44a3400482fcaa9c535929e62676c1834524ead_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:44230e060120cd247e24f22e21b03423ac13b4f41f6eb081172f9be06f25c584_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:68d192c8b0b1fe78c82e9640cb734ac14b2321a8c710f88ac06bb87892fb2313_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-console-rhel9@sha256:f18eef7c2dd973425a667f993bd8c3ed5b06acf098276d56d4840da210b11b2e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:0d1c736eb20d065e6c48a12902c87396f8babdea65207a838301dad0937c7e2e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:303de185a374a7d3a22eec6d10e1c8a178f68a33d0573b195fa8d9b40d67becc_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:84153090a97f4d2fd7c9136a40cf98d5bbc86acf9ae978d8ae17a731284d5aaf_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-hypershift-rhel9@sha256:cdea7b9a3878b0f1b087fc19587e91f6c35a1325e09efe411985f35c7af7a3d4_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:3df178f2cdc1b46a0fb728b1ce65689052c1728cfacadd4ad95383017a625202_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-machine-os-downloader-rhel9@sha256:6b500dcb1d4dd390820c45b6c53cf5edc822e49dacd525fb4530ce904c09d8f1_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:683cd49dfc9a43c876db6cf94b9f7e417cee3f7bc0adbd320aa0cb924b817732_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-ironic-rhel9@sha256:9a59698fa26507d2dac42c9d5add511fcb224a25bbc2b8d6c24f443ee8c28410_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:1833524376750ff3cf91d4e95eb6670180428c4d936520002a6cf27ecde777f1_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:57686feccedbbb655b36d5231aa69f47b0d77ff9c04203bb78218feb0367585e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:749150b69ff000b5f45a5c169ef58c2c67541f1f5caba7539a2e8e133abb122c_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-machine-config-rhel9-operator@sha256:a3085627a26e2e6c6be38a3a6757523da4da6130a8517e6fc37076df6ee101f7_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:134def2853a731f3d51183c2efbd3d475cf64156dd3fec97cf84a2ff46f3297e_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:32455bd12de20c48a129c30001ee8dadb6583182df7797ee6ace06e3a4a09547_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:4873d888ea06945c205c5d1810c0ab733fb1ecfd09a7479a57bdfa79b0a817f3_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-monitoring-plugin-rhel9@sha256:806df3b271c6ca7e964042117e47a09e6d8c6aa172b5413e6863381acc0b1202_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:0c0289461e7dc8ace658fee1c39f97e7718f563d903e103436da4359f8570b65_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:33578de6f34f30567f0b7d3b5cda88e441026c02fa3a404876672fe586313f73_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:5baa44685b91e787650260630be8ba4a375b89075ac0c2044028ec66b9e9fe85_s390x",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-oauth-proxy-rhel9@sha256:d5e995a9e67601d5caca85a6279393e8a7535d06071c1cb8892c85f1ec9c6c7a_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:1dcaf6f017f0cf1d06f5626490fec03a29101f94ff4e88e487a81c6c403b5533_ppc64le",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:384e092f3affff6a2e7bf4b5a2c288046c32175d5a4f032905d6a2fcaff800d1_amd64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a5a27f6ce4c81f82f91ef9b926e8ed134419357433ad84ba067483a518b572d2_arm64",
"Red Hat OpenShift Container Platform 4.18:registry.redhat.io/openshift4/ose-prometheus-rhel9@sha256:a7f6a9f55ead1030ce6fbc0fd991e5d4f5f7642a73e86605486eef6637036e08_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Denial of Service via uncontrolled memory allocation in remote read endpoint"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
Loading…
Loading…