Known vulnerabilities in Red Hat OpenShift Container Platform 4

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-3833	Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison	6.5 Medium	Apr 30, 2026
CVE-2025-14576	Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading…	7.4 High	Apr 30, 2026
CVE-2026-7309	A flaw was found in the OpenShift Container Platform build system	4.3 Medium	Apr 28, 2026
CVE-2026-41607	Out-of-bounds Read vulnerability in Apache Thrift	Not rated	Apr 28, 2026
CVE-2026-41606	Uncontrolled Recursion vulnerability in Apache Thrift	Not rated	Apr 28, 2026
CVE-2026-41605	Integer Overflow or Wraparound vulnerability in Apache Thrift	Not rated	Apr 28, 2026
CVE-2026-41604	Out-of-bounds Read vulnerability in Apache Thrift	Not rated	Apr 28, 2026
CVE-2026-41603	Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift	Not rated	Apr 28, 2026
CVE-2026-41602	Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue…	Not rated	Apr 28, 2026
CVE-2025-48431	Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings	Not rated	Apr 28, 2026
CVE-2026-41326	Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs)…	8.2 High	Apr 24, 2026
CVE-2026-42039	Axios is a promise based HTTP client for the browser and Node.js	6.9 Medium	Apr 24, 2026
CVE-2026-42041	Axios is a promise based HTTP client for the browser and Node.js	4.8 Medium	Apr 24, 2026
CVE-2026-42043	Axios is a promise based HTTP client for the browser and Node.js	7.2 High	Apr 24, 2026
CVE-2026-42044	Axios is a promise based HTTP client for the browser and Node.js	6.5 Medium	Apr 24, 2026
CVE-2026-42033	Axios is a promise based HTTP client for the browser and Node.js	7.4 High	Apr 24, 2026
CVE-2026-41140	Poetry is a dependency manager for Python	0.6 Low	Apr 24, 2026
CVE-2026-40897	Math.js is an extensive math library for JavaScript and Node.js	8.8 High	Apr 24, 2026
CVE-2026-5367	A flaw was found in OVN (Open Virtual Network)	8.6 High	Apr 24, 2026
CVE-2026-41316	ERB is a templating system for Ruby	8.1 High	Apr 24, 2026
CVE-2026-6732	Libxml2: libxml2: denial of service via crafted xsd-validated document	6.5 Medium	Apr 23, 2026
CVE-2026-6862	Efivar: efivar: denial of service due to stack overflow in device path node parsing	5.5 Medium	Apr 22, 2026
CVE-2026-6846	Binutils: binutils: arbitrary code execution via malformed xcoff object file processing	7.8 High	Apr 22, 2026
CVE-2026-6844	Binutils: binutils: denial of service vulnerabilities in readelf via crafted elf files	5.5 Medium	Apr 22, 2026
CVE-2026-6843	Nano: nano: format string vulnerability leads to denial of service	5.5 Medium	Apr 22, 2026

Other Red Hat products