Vulnerabilities of Red Hat Red Hat Openshift Data Foundation 4
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-66792 | A flaw was found in the multicloud-operators-subscription component | 9.9 Critical | Aug 17, 2026 |
| CVE-2026-44477 | CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments | 9.4 Critical | May 28, 2026 |
| CVE-2026-39821 | The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label | 9.6 Critical | May 22, 2026 |
| CVE-2026-42508 | Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation | 9.1 Critical | May 22, 2026 |
| CVE-2026-46595 | Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of… | 10.0 Critical | May 22, 2026 |
| CVE-2026-39830 | A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the… | 9.1 Critical | May 22, 2026 |
| CVE-2026-39832 | When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh.com were not… | 9.1 Critical | May 22, 2026 |
| CVE-2026-42880 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes | 9.6 Critical | May 7, 2026 |
| CVE-2026-41242 | protobufjs compiles protobuf definitions into JavaScript (JS) functions | 9.4 Critical | Apr 18, 2026 |
| CVE-2026-33815 | Memory-safety vulnerability in github.com/jackc/pgx/v5 | 9.8 Critical | Apr 7, 2026 |
| CVE-2026-33816 | Memory-safety vulnerability in github.com/jackc/pgx/v5 | 9.8 Critical | Apr 7, 2026 |
| CVE-2026-33186 | gRPC-Go is the Go language implementation of gRPC | 9.1 Critical | Mar 20, 2026 |
| CVE-2026-25896 | fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based… | 9.3 Critical | Feb 20, 2026 |
| CVE-2025-56005 | An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via… | 9.8 Critical | Jan 20, 2026 |
| CVE-2025-61686 | React Router is a router for React | 9.1 Critical | Jan 10, 2026 |
Other Red Hat products
Red Hat Enterprise Linux 9 1865
Red Hat Enterprise Linux 8 1839
Red Hat Enterprise Linux 7 1502
Red Hat Enterprise Linux 10 1455
Red Hat Enterprise Linux 6 1340
Red Hat OpenShift Container Platform 4 629
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433