RH
Product
Red Hat Openshift Data Foundation 4.22
18
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 4High 9Medium 5Low 0
Watch
Add Red Hat Openshift Data Foundation 4.22 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-39829 | 7.5 | May 22 | Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh Affected: All versions, or not specified |
| CVE-2026-45736 | 7.5 | May 15 | ws: Uninitialized memory disclosure Affected: All versions, or not specified |
| CVE-2026-33814 | 7.5 | May 7 | Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net Affected: All versions, or not specified |
| CVE-2026-6322 | 7.5 | May 5 | fast-uri vulnerable to host confusion via percent-encoded authority delimiters Affected: All versions, or not specified |
| CVE-2026-6321 | 7.5 | May 4 | fast-uri vulnerable to path traversal via percent-encoded dot segments Affected: All versions, or not specified |
| CVE-2026-35172 | 7.5 | Apr 6 | Distribution has stale blob access resurrection via repo-scoped redis descriptor cache invalidation Affected: All versions, or not specified |
| CVE-2026-34986 | 7.5 | Apr 6 | Go JOSE affect by a panic in JWE decryption Affected: All versions, or not specified |
| CVE-2026-41567 | 7.2 | Jun 5 | Docker: `PUT /containers/{id}/archive` executes container binary on the host Affected: All versions, or not specified |
| CVE-2026-39883 | 7.0 | Apr 8 | OpenTelemetry-Go has an incomplete fix for CVE-2026-24051: BSD kenv command not using absolute path enables PATH hijacking Affected: All versions, or not specified |
Showing 9