Vulnérabilités de Red Hat Red Hat OpenShift Container Platform 4.21

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-9277	shell-quote's `quote()` function did not validate object-token inputs against the operator model used by `parse()`	8.1 Élevée	22 mai 2026
CVE-2026-39829	The RSA and DSA public key parsers did not enforce size limits on key parameters	7.5 Élevée	22 mai 2026
CVE-2026-39830	A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the…	9.1 Critique	22 mai 2026
CVE-2026-42009	Gnutls: gnutls: denial of service via dtls packet reordering vulnerability	7.5 Élevée	18 mai 2026
CVE-2026-45736	ws is an open source WebSocket client and server for Node.js	4.4 Moyenne	15 mai 2026
CVE-2025-54518	Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to…	7.3 Élevée	15 mai 2026
CVE-2026-44293	protobufjs compiles protobuf definitions into JavaScript (JS) functions	7.7 Élevée	13 mai 2026
CVE-2026-42338	ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript	5.3 Moyenne	12 mai 2026
CVE-2026-43329	In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: strictly check for maximum…	7.8 Élevée	8 mai 2026
CVE-2026-43284	In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb…	8.8 Élevée	8 mai 2026
CVE-2026-33811	When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a…	7.5 Élevée	7 mai 2026
CVE-2026-39820	Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion…	7.5 Élevée	7 mai 2026
CVE-2026-42499	Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322	7.5 Élevée	7 mai 2026
CVE-2026-33814	When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it…	7.5 Élevée	7 mai 2026
CVE-2026-42011	Gnutls: gnutls: security bypass due to incorrect name constraint handling	7.4 Élevée	7 mai 2026
CVE-2026-42010	Gnutls: gnutls: authentication bypass via nul character in username	7.1 Élevée	7 mai 2026
CVE-2026-41674	xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module	8.7 Élevée	7 mai 2026
CVE-2026-43114	In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo_avx2: don't return…	9.4 Critique	6 mai 2026
CVE-2026-43112	In the Linux kernel, the following vulnerability has been resolved: fs/smb/client: fix out-of-bounds read in…	8.8 Élevée	6 mai 2026
CVE-2026-6322	fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them…	7.5 Élevée	5 mai 2026
CVE-2026-42154	Prometheus is an open-source monitoring system and time series database	7.5 Élevée	4 mai 2026
CVE-2026-42151	Prometheus is an open-source monitoring system and time series database	7.5 Élevée	4 mai 2026
CVE-2026-43037	In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: clear skb2->cb[] in ip4ip6_err() Oskar…	9.8 Critique	1 mai 2026
CVE-2026-43003	An issue was discovered in OpenStack ironic-python-agent 1.0.0 through 11.5.0	8.0 Élevée	1 mai 2026
CVE-2026-42039	Axios is a promise based HTTP client for the browser and Node.js	6.9 Moyenne	24 avr. 2026

Autres produits Red Hat