Known vulnerabilities in Red Hat OpenShift Container Platform 4

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-35172	Distribution is a toolkit to pack, ship, store, and deliver container content	7.5 High	Apr 6, 2026
CVE-2026-34986	Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including…	7.5 High	Apr 6, 2026
CVE-2026-34982	Vim is an open source, command line text editor	8.2 High	Apr 6, 2026
CVE-2026-3184	Util-linux: util-linux: access control bypass due to improper hostname canonicalization	3.7 Low	Apr 3, 2026
CVE-2026-34601	xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module	7.5 High	Apr 2, 2026
CVE-2026-35092	A flaw was found in Corosync	7.5 High	Apr 1, 2026
CVE-2026-35091	A flaw was found in Corosync	8.2 High	Apr 1, 2026
CVE-2026-4800	The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same…	8.1 High	Mar 31, 2026
CVE-2026-33997	Moby is an open source container framework	6.8 Medium	Mar 31, 2026
CVE-2026-34714	Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default…	9.2 Critical	Mar 30, 2026
CVE-2026-5121	Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing	7.5 High	Mar 30, 2026
CVE-2026-2370	GitLab has remediated an issue in GitLab CE/EE affecting all versions from 14.3 before 18.8.7, 18.9 before 18.9.3, and…	8.1 High	Mar 29, 2026
CVE-2026-34226	Happy DOM is a JavaScript implementation of a web browser without its graphical user interface	7.5 High	Mar 27, 2026
CVE-2026-33943	Happy DOM is a JavaScript implementation of a web browser without its graphical user interface	8.8 High	Mar 27, 2026
CVE-2026-4948	Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization	5.5 Medium	Mar 27, 2026
CVE-2026-0965	Libssh: libssh: denial of service via improper configuration file handling	3.3 Low	Mar 26, 2026
CVE-2026-0967	Libssh: libssh: denial of service via inefficient regular expression processing	2.2 Low	Mar 26, 2026
CVE-2026-0968	Libssh: libssh: denial of service due to malformed sftp message	3.1 Low	Mar 26, 2026
CVE-2026-0964	Libssh: improper sanitation of paths received from scp servers	5.0 Medium	Mar 26, 2026
CVE-2026-0966	Libssh: libssh: denial of service via zero-length input in ssh_get_hexa()	6.5 Medium	Mar 26, 2026
CVE-2026-2100	P11-kit: null dereference via c_derivekey with specific null parameters	5.3 Medium	Mar 26, 2026
CVE-2026-32285	The Delete function fails to properly validate offsets when processing malformed JSON input	7.5 High	Mar 26, 2026
CVE-2026-32286	The DataRow.Decode function fails to properly validate field lengths	7.5 High	Mar 26, 2026
CVE-2026-4926	Impact: A bad regular expression is generated any time you have multiple sequential optional groups (curly brace…	7.5 High	Mar 26, 2026
CVE-2026-4897	Polkit: polkit: denial of service via unbounded input processing through standard input	5.5 Medium	Mar 26, 2026

Other Red Hat products