Known vulnerabilities in Red Hat OpenShift Container Platform 4

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-33218	NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system	7.5 High	Mar 25, 2026
CVE-2026-33217	NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system	7.1 High	Mar 25, 2026
CVE-2026-33216	NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system	8.6 High	Mar 25, 2026
CVE-2026-29785	NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system	7.5 High	Mar 25, 2026
CVE-2026-27889	NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system	7.5 High	Mar 25, 2026
CVE-2026-3104	A specially crafted domain can be used to cause a memory leak in a BIND resolver simply by querying this domain	7.5 High	Mar 25, 2026
CVE-2026-1519	If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume…	7.5 High	Mar 25, 2026
CVE-2026-4647	Binutils: out-of-bounds read in xcoff relocation processing in gnu binutils bfd library	6.1 Medium	Mar 23, 2026
CVE-2026-33228	flatted is a circular JSON parser	8.9 High	Mar 20, 2026
CVE-2026-33186	gRPC-Go is the Go language implementation of gRPC	9.1 Critical	Mar 20, 2026
CVE-2026-4426	Libarchive: libarchive: denial of service via malformed iso file processing	6.5 Medium	Mar 19, 2026
CVE-2026-4424	Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing	7.5 High	Mar 19, 2026
CVE-2026-30922	pyasn1 is a generic ASN.1 library for Python	7.5 High	Mar 18, 2026
CVE-2026-27459	pyOpenSSL is a Python wrapper around the OpenSSL library	7.2 High	Mar 17, 2026
CVE-2026-3441	Binutils: gnu binutils: information disclosure via specially crafted xcoff object file	6.1 Medium	Mar 15, 2026
CVE-2026-3442	Binutils: gnu binutils: information disclosure or denial of service via out-of-bounds read in bfd linker	6.1 Medium	Mar 15, 2026
CVE-2026-4111	Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive	7.5 High	Mar 13, 2026
CVE-2026-4105	Systemd: systemd: privilege escalation via improper access control in registermachine d-bus method	6.7 Medium	Mar 13, 2026
CVE-2026-32141	flatted is a circular JSON parser	7.5 High	Mar 12, 2026
CVE-2026-31812	Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol	8.7 High	Mar 10, 2026
CVE-2026-29786	node-tar is a full-featured Tar for Node.js	8.2 High	Mar 7, 2026
CVE-2026-25679	url.Parse insufficiently validated the host/authority component and accepted some invalid URLs	7.5 High	Mar 6, 2026
CVE-2026-27137	When verifying a certificate chain which contains a certificate containing multiple email address constraints which…	7.5 High	Mar 6, 2026
CVE-2026-29063	Immutable.js provides many Persistent Immutable data structures	8.7 High	Mar 6, 2026
CVE-2026-26017	CoreDNS is a DNS server that chains plugins	7.7 High	Mar 6, 2026

Other Red Hat products