A flaw was found in Red Hat Single Sign-On for OpenShift container images, which are configured with an unsecured management interface enabled

A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect

Keycloak's device authorization grant does not correctly validate the device code and client ID

A vulnerability was found in cri-o

A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function

Libxml2: integer overflow in xmlbuildqname() leads to stack buffer overflow in libxml2

Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol

A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied…

A flaw was found in undertow

A compliance problem was found in the Red Hat OpenShift Container Platform

The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O

A flaw was found in the redirect_uri validation logic in Keycloak

A flaw was found in the offline_access scope in Keycloak

A vulnerability was found in Podman, Buildah, and CRI-O

Keycloak: potential bypass of brute force protection

A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane (HCP)

A misconfiguration flaw was found in Keycloak