Red Hat OpenShift Container Platform 4.17.15 and associated products have multiple security vulnerabilities affecting various components and libraries. These include CVE-2024-21538 (Regular expression denial of service in cross-spawn), CVE-2024-45590 (Denial of Service in body-parser), CVE-2024-48910 (Prototype pollution in DOMPurify), CVE-2024-56201 (Sandbox breakout in Jinja2), CVE-2024-43796 (Improper input handling in Express redirects), CVE-2024-43799 (Code execution in Send library), CVE-2024-43800 (Improper sanitization in serve-static), and others. Red Hat has issued security advisories RHSA-2024:10186 and RHSA-2025:3368 detailing fixes and updated images. The advisories recommend upgrading to patched versions such as RHACS 4.5.5 and RHOAI 2.16.0. The vulnerabilities span multiple CWEs including input validation errors, memory corruption, and denial of service conditions. No known exploits in the wild have been reported at this time.

The vulnerabilities collectively could allow attackers to cause denial of service, execute arbitrary code, bypass sandbox restrictions, or tamper with application behavior through prototype pollution or improper input handling. These impacts could affect the confidentiality, integrity, and availability of affected Red Hat OpenShift deployments and associated Kubernetes security components. However, there are no reports of active exploitation in the wild. The severity is assessed as high due to the potential for code execution and denial of service.

Red Hat has released official patches and updated container images to address these vulnerabilities. Users should upgrade to Red Hat OpenShift Container Platform 4.17.15, Red Hat Advanced Cluster Security for Kubernetes 4.5.5, and Red Hat OpenShift AI 2.16.0 or later as applicable. The vendor manages remediation for these products through official updates and advisories. Applying these updates will mitigate the vulnerabilities. No additional vendor-recommended mitigations or workarounds are indicated in the advisory.