Vulnerabilities of Red Hat Red Hat OpenStack Platform 16.2

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-0994	A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the…	8.2 High	Jan 23, 2026
CVE-2025-56005	An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via…	9.8 Critical	Jan 20, 2026
CVE-2026-22797	An issue was discovered in OpenStack keystonemiddleware 10.5 through 10.7 before 10.7.2, 10.8 and 10.9 before 10.9.1,…	9.9 Critical	Jan 19, 2026
CVE-2026-23490	pyasn1 is a generic ASN.1 library for Python	7.5 High	Jan 16, 2026
CVE-2026-0532	External Control of File Name or Path (CWE-73) combined with Server-Side Request Forgery (CWE-918) can allow an attacker…	8.6 High	Jan 14, 2026
CVE-2026-21441	urllib3 is an HTTP client library for Python	8.9 High	Jan 7, 2026
CVE-2026-22184	zlib versions up to and including 1.3.1.2 include a global buffer overflow in the untgz utility located under…	4.6 Medium	Jan 7, 2026
CVE-2021-4472	The mistral-dashboard plugin for openstack has a local file inclusion vulnerability through the 'Create Workbook'…	6.5 Medium	Nov 26, 2025
CVE-2025-8556	A flaw was found in CIRCL's implementation of the FourQ elliptic curve	3.7 Low	Aug 6, 2025
CVE-2023-6110	A flaw was found in OpenStack	5.5 Medium	Nov 17, 2024
CVE-2024-9355	Golang-fips: golang fips zeroed buffer	6.5 Medium	Oct 1, 2024
CVE-2024-8007	A flaw was found in the openstack-tripleo-common component of the Red Hat OpenStack Platform (RHOSP) director	8.1 High	Aug 21, 2024
CVE-2024-43168	DISPUTE NOTE: this issue does not pose a security risk as it (according to analysis by the original software…	4.8 Medium	Aug 8, 2024
CVE-2024-43167	DISPUTE NOTE: this issue does not pose a security risk as it (according to analysis by the original software…	2.8 Low	Aug 8, 2024
CVE-2024-7319	An incomplete fix for CVE-2023-1625 was found in openstack-heat	5.0 Medium	Aug 2, 2024
CVE-2024-4840	An flaw was found in the OpenStack Platform (RHOSP) director, a toolset for installing and managing a complete RHOSP…	5.5 Medium	May 13, 2024
CVE-2024-3727	Containers/image: digest type does not guarantee valid type	8.3 High	May 9, 2024
CVE-2024-4438	The etcd package distributed with the Red Hat OpenStack platform has an incomplete fix for…	7.5 High	May 8, 2024
CVE-2024-4437	The etcd package distributed with the Red Hat OpenStack platform has an incomplete fix for CVE-2021-44716	7.5 High	May 8, 2024
CVE-2024-4436	The etcd package distributed with the Red Hat OpenStack platform has an incomplete fix for CVE-2022-41723	7.5 High	May 8, 2024
CVE-2024-1394	Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads	7.5 High	Mar 21, 2024
CVE-2023-6725	An access-control flaw was found in the OpenStack Designate component where private configuration information…	5.5 Medium	Mar 15, 2024
CVE-2024-1141	A vulnerability was found in python-glance-store	5.5 Medium	Feb 1, 2024
CVE-2023-5366	A flaw was found in Open vSwitch that allows ICMPv6 Neighbor Advertisement packets between virtual machines to bypass…	7.1 High	Oct 6, 2023
CVE-2023-1633	A credentials leak flaw was found in OpenStack Barbican	6.6 Medium	Sep 24, 2023

Other Red Hat products