openshift data foundation 4.21 vulnerabilities (CVE)

CVE records published for openshift data foundation 4.21, newest first. Follow to get an email when a new one appears.

3 results
8.1High
CVE-2026-42945

NGINX ngx_http_rewrite_module vulnerability

F5 NGINX Plus; F5 NGINX Open Source; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support

NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when the rewrite directive is followed by a rewrite, if, or set directive and an unnamed Perl-Compatible Regular Expression (PCRE) capture (…

68%EPSS
7.5High
CVE-2026-6322

fast-uri vulnerable to host confusion via percent-encoded authority delimiters

fast-uri fast-uri; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9; Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9

fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them as raw delimiters during serialization. A host that combined an allowed domain, an encoded at-sign, and a different domain was re-emitted with…

7.5High
CVE-2026-34986

Go JOSE affect by a panic in JWE decryption

go-jose go-jose; Red Hat Cryostat 4 on RHEL 9; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.4 and 3.0.5, decrypting a JS…