Vulnerabilities of Red Hat Logging Subsystem for Red Hat OpenShift

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-29181	OpenTelemetry-Go is the Go implementation of OpenTelemetry	7.5 High	Apr 7, 2026
CVE-2026-34986	Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including…	7.5 High	Apr 6, 2026
CVE-2026-34827	Rack is a modular Ruby web server interface	7.5 High	Apr 2, 2026
CVE-2026-34829	Rack is a modular Ruby web server interface	7.5 High	Apr 2, 2026
CVE-2026-4800	The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same…	8.1 High	Mar 31, 2026
CVE-2026-33941	Handlebars provides the power necessary to let users build semantic templates	8.3 High	Mar 27, 2026
CVE-2026-33940	Handlebars provides the power necessary to let users build semantic templates	8.1 High	Mar 27, 2026
CVE-2026-33939	Handlebars provides the power necessary to let users build semantic templates	7.5 High	Mar 27, 2026
CVE-2026-33938	Handlebars provides the power necessary to let users build semantic templates	8.1 High	Mar 27, 2026
CVE-2026-33937	Handlebars provides the power necessary to let users build semantic templates	9.8 Critical	Mar 27, 2026
CVE-2026-33896	Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript	7.4 High	Mar 27, 2026
CVE-2026-33895	Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript	7.5 High	Mar 27, 2026
CVE-2026-33894	Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript	7.5 High	Mar 27, 2026
CVE-2026-33891	Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript	7.5 High	Mar 27, 2026
CVE-2026-33871	Netty is an asynchronous, event-driven network application framework	8.7 High	Mar 27, 2026
CVE-2026-33870	Netty is an asynchronous, event-driven network application framework	7.5 High	Mar 27, 2026
CVE-2026-32285	The Delete function fails to properly validate offsets when processing malformed JSON input	7.5 High	Mar 26, 2026
CVE-2026-4926	Impact: A bad regular expression is generated any time you have multiple sequential optional groups (curly brace…	7.5 High	Mar 26, 2026
CVE-2026-33228	flatted is a circular JSON parser	8.9 High	Mar 20, 2026
CVE-2026-33210	Ruby JSON is a JSON implementation for Ruby	8.3 High	Mar 20, 2026
CVE-2026-33186	gRPC-Go is the Go language implementation of gRPC	9.1 Critical	Mar 20, 2026
CVE-2026-32304	Locutus brings stdlibs of other programming languages to JavaScript for educational purposes	9.8 Critical	Mar 12, 2026
CVE-2026-32141	flatted is a circular JSON parser	7.5 High	Mar 12, 2026
CVE-2026-31812	Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol	8.7 High	Mar 10, 2026
CVE-2026-28292	`simple-git`, an interface for running git commands in any node.js application, has an issue in versions 3.15.0…	9.8 Critical	Mar 10, 2026

Other Red Hat products