RH
Product
Red Hat OpenShift Container Platform 4.21
On CISA KEVExploited in the wild
79
CVEs
1
On KEV
10.0
Max CVSS
6
New 30D
Severity mix
Critical 13High 57Medium 9Low 0
Watch
Add Red Hat OpenShift Container Platform 4.21 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-27145 | 6.5 | Jun 2 | Inefficient candidate hostname parsing in crypto/x509 Affected: All versions, or not specified |
| CVE-2026-42965 | 6.5 | May 29 | Openshift/router: openshift/router: cloud metadata ssrf via fqdn-typed endpointslice bypasses destination validation Affected: All versions, or not specified |
| CVE-2026-1933 | 6.5 | May 27 | Samba: missing access check on reparse point operations Affected: All versions, or not specified |
| CVE-2026-42041 | 6.5 | Apr 24 | Axios: Authentication Bypass via Prototype Pollution Gadget in `validateStatus` Merge Strategy Affected: All versions, or not specified |
| CVE-2026-35469 | 6.5 | Apr 16 | SpdyStream: DOS on CRI Affected: All versions, or not specified |
| CVE-2026-83589 | 6.1 | Oct 1 | Oauth-proxy: open redirect via /\ and /\t bypass in post-login redirect Affected: All versions, or not specified |
| CVE-2026-42338 | 6.1 | May 12 | ip-address: XSS in Address6 HTML-emitting methods Affected: All versions, or not specified |
| CVE-2025-13465 | 5.3 | Jan 21 | Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions Affected: All versions, or not specified |
| CVE-2026-40175 | 4.8 | Apr 10 | Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain Affected: All versions, or not specified |
Showing 9