Vulnérabilités connues pour Red Hat OpenShift Container Platform 4.22

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-58015	Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive	5.9 Moyenne	30 juin 2026
CVE-2026-58014	Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"	7.3 Élevée	30 juin 2026
CVE-2026-14164	Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()	7.5 Élevée	30 juin 2026
CVE-2026-13676	fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTTP-family URLs	7.5 Élevée	29 juin 2026
CVE-2026-54369	acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions…	8.4 Élevée	29 juin 2026
CVE-2026-12505	Cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall	7.8 Élevée	18 juin 2026
CVE-2026-46331	In the Linux kernel, the following vulnerability has been resolved: net/sched: fix pedit partial COW leading to page…	7.8 Élevée	16 juin 2026
CVE-2026-44990	ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer…	9.3 Critique	12 juin 2026
CVE-2026-12143	form-data is a library for creating readable multipart/form-data streams	8.7 Élevée	12 juin 2026
CVE-2026-47162	Vim is an open source, command line text editor	7.3 Élevée	11 juin 2026
CVE-2026-44487	Axios is a promise based HTTP client for the browser and Node.js	8.2 Élevée	11 juin 2026
CVE-2026-44488	Axios is a promise based HTTP client for the browser and Node.js	7.5 Élevée	11 juin 2026
CVE-2026-44495	Axios is a promise based HTTP client for the browser and Node.js	7.0 Élevée	11 juin 2026
CVE-2026-44494	Axios is a promise based HTTP client for the browser and Node.js	8.7 Élevée	11 juin 2026
CVE-2026-46316	In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Drop the translation cache…	9.3 Critique	9 juin 2026
CVE-2025-10263	Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925,…	9.1 Critique	9 juin 2026
CVE-2026-42965	Openshift/router: openshift/router: cloud metadata ssrf via fqdn-typed endpointslice bypasses destination validation	7.7 Élevée	29 mai 2026
CVE-2026-46579	A flaw was found in the OpenShift Router	7.4 Élevée	29 mai 2026
CVE-2026-1933	Samba: missing access check on reparse point operations	7.1 Élevée	27 mai 2026
CVE-2026-42013	Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name	8.2 Élevée	26 mai 2026
CVE-2026-42012	A flaw was found in gnutls	7.1 Élevée	26 mai 2026
CVE-2026-5260	Gnutls: gnutls: information disclosure via heap overread in rsa key exchange	8.2 Élevée	26 mai 2026
CVE-2026-39821	The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label	9.6 Critique	22 mai 2026
CVE-2026-9277	shell-quote's `quote()` function did not validate object-token inputs against the operator model used by `parse()`	8.1 Élevée	22 mai 2026
CVE-2026-39829	The RSA and DSA public key parsers did not enforce size limits on key parameters	7.5 Élevée	22 mai 2026

Autres produits Red Hat