Red Hat Security Advisory: RHOAI 3.4.4 - Red Hat OpenShift AI
Affects Red HatSource GCVE Database
Not known to be exploited.
Data as of 26 Oct 2026, 16:39 UTC
Rated by Threat Radar · CVSS not yet scored by NVD
- EPSS
- 0.6% chance of exploitation in 30 days – higher than 52% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Exploitation evidence
Disclosed: evidence found.
CVE published 27 Aug 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
- Disclosed
- The CVE record is public on cve.org. Its publication is t = 0.
- Detectable
- A public nuclei template can find exposed instances, for defenders and attackers alike.
- Weaponised
- Public exploit code exists in Metasploit or Exploit-DB, or CISA SSVC or the CVSS exploit maturity reports a public proof of concept.
- Exploited in the wild
- CISA KEV lists it, CISA SSVC rates exploitation active, or a source reports attacks.
- Observed by OffSeq Mirage
- OffSeq Mirage honeypot sensors recorded attack traffic for this CVE, or found exposed hosts without attack traffic.
Moments are spaced evenly, not to scale; a dashed line marks a gap of six months or more. Deltas count from t = 0. Sources that give only a date (CISA KEV, Exploit-DB, or a time of exactly 00:00Z) read “same day” rather than hours. Metasploit modules carry the flaw’s disclosure date, not their release date, and nuclei templates carry no date, so both appear above but not on the timeline.
Description
Release of RHOAI 3.4.4 provides these changes:
- CWE-409Improper Handling of Highly Compressed Data (Data Amplification) (opens in a new tab)
Base weakness
The product does not handle or incorrectly handles a compressed input with a very high compression ratio that produces a large output.
- OWASP Cheat Sheets
- OWASP ASVS 4.0.3
From MITRE CWE, MITRE CAPEC and OWASP (Top 10, OpenCRE).
- CWE-73External Control of File Name or Path (opens in a new tab)
Base weaknessLikelihood of exploit: HighOWASP Top 10 A06:2025: Insecure Design (opens in a new tab)
The product allows user input to control or influence paths or file names that are used in filesystem operations.
Architecture and Design
When the set of filenames is limited or known, create a mapping from a set of fixed input values (such as numeric IDs) to the actual filenames, and reject all other inputs. For example, ID 1 could map to "inbox.txt" and ID 2 could map to "profile.txt".
Architecture and Design · Operation
Run your code in a "jail" or similar sandbox environment that enforces strict boundaries between the process and the operating system. This may effectively restrict all access to files within a particular directory.
Architecture and Design
For any security checks that are performed on the client side, ensure that these checks are duplicated on the server side, in order to avoid CWE-602. Attackers can bypass the client-side checks by modifying values after the checks have been performed, or by changing the client to remove the client-side checks…
- OWASP Cheat Sheets
- Attack patterns
From MITRE CWE, MITRE CAPEC and OWASP (Top 10, OpenCRE).
- CWE-835Loop with Unreachable Exit Condition ('Infinite Loop') (opens in a new tab)
Base weakness
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
- CWE-306Missing Authentication for Critical Function (opens in a new tab)
Base weaknessLikelihood of exploit: HighCWE Top 25 (2025): #21OWASP Top 10 A07:2025: Authentication Failures (opens in a new tab)
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
Architecture and Design
Divide the software into anonymous, normal, privileged, and administrative areas. Identify which of these areas require a proven user identity, and use a centralized authentication capability.
Architecture and Design
For any security checks that are performed on the client side, ensure that these checks are duplicated on the server side, in order to avoid CWE-602. Attackers can bypass the client-side checks by modifying values after the checks have been performed, or by changing the client to remove the client-side checks…
Architecture and Design
Where possible, avoid implementing custom, "grow-your-own" authentication routines and consider using authentication capabilities as provided by the surrounding framework, operating system, or environment.
- OWASP Cheat Sheets
From MITRE CWE, MITRE CAPEC and OWASP (Top 10, OpenCRE).
- CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (opens in a new tab)
Base weaknessLikelihood of exploit: HighCWE Top 25 (2025): #6OWASP Top 10 A01:2025: Broken Access Control (opens in a new tab)
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
Implementation · Input Validation
Assume all input is malicious. Use an "accept known good" input validation strategy, i.e., use a list of acceptable inputs that strictly conform to specifications. Reject any input that does not strictly conform to specifications, or transform it into something that does.
Architecture and Design
For any security checks that are performed on the client side, ensure that these checks are duplicated on the server side, in order to avoid CWE-602. Attackers can bypass the client-side checks by modifying values after the checks have been performed, or by changing the client to remove the client-side checks…
Implementation · Input Validation
Inputs should be decoded and canonicalized to the application's current internal representation before being validated (CWE-180). Make sure that the application does not decode the same input twice (CWE-174).
- OWASP Cheat Sheets
- OWASP ASVS 4.0.3
- Attack patterns
- Path Traversal (opens in a new tab)
- Using Slashes and URL Encoding Combined to Bypass Validation Logic (opens in a new tab)
- Manipulating Web Input to File System Calls (opens in a new tab)
- Using Escaped Slashes in Alternate Encoding (opens in a new tab)
- Using Slashes in Alternate Encoding (opens in a new tab)
From MITRE CWE, MITRE CAPEC and OWASP (Top 10, OpenCRE).
- CWE-829Inclusion of Functionality from Untrusted Control Sphere (opens in a new tab)
Base weaknessOWASP Top 10 A08:2025: Software or Data Integrity Failures (opens in a new tab)
The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere.
Architecture and Design · Libraries or Frameworks
Use a vetted library or framework that does not allow this weakness to occur or provides constructs that make this weakness easier to avoid.
Architecture and Design · Enforcement by Conversion
When the set of acceptable objects, such as filenames or URLs, is limited or known, create a mapping from a set of fixed input values (such as numeric IDs) to the actual filenames or URLs, and reject all other inputs.
Architecture and Design
For any security checks that are performed on the client side, ensure that these checks are duplicated on the server side, in order to avoid CWE-602. Attackers can bypass the client-side checks by modifying values after the checks have been performed, or by changing the client to remove the client-side checks…
- OWASP Cheat Sheets
- OWASP ASVS 4.0.3
From MITRE CWE, MITRE CAPEC and OWASP (Top 10, OpenCRE).
- CWE-140Improper Neutralization of Delimiters (opens in a new tab)
Base weakness
The product does not neutralize or incorrectly neutralizes delimiters.
Implementation · Input Validation
Developers should anticipate that delimiters will be injected/removed/manipulated in the input vectors of their product. Use an appropriate combination of denylists and allowlists to ensure only valid, expected and appropriate input is processed by the system.
Implementation · Input Validation
Assume all input is malicious. Use an "accept known good" input validation strategy, i.e., use a list of acceptable inputs that strictly conform to specifications. Reject any input that does not strictly conform to specifications, or transform it into something that does.
Implementation · Output Encoding
While it is risky to use dynamically-generated query strings, code, or commands that mix control and data together, sometimes it may be unavoidable. Properly quote arguments and escape any special characters within those arguments.
- OWASP Cheat Sheets
- OWASP ASVS 4.0.3
- Attack patterns
From MITRE CWE, MITRE CAPEC and OWASP (Top 10, OpenCRE).
- CWE-940Improper Verification of Source of a Communication Channel (opens in a new tab)
Base weaknessOWASP Top 10 A07:2025: Authentication Failures (opens in a new tab)
The product establishes a communication channel to handle an incoming request that has been initiated by an actor, but it does not properly verify that the request is coming from the expected origin.
Architecture and Design
Use a mechanism that can validate the identity of the source, such as a certificate, and validate the integrity of data to ensure that it cannot be modified in transit using an Adversary-in-the-Middle (AITM) attack.
- OWASP Cheat Sheets
- OWASP ASVS 4.0.3
From MITRE CWE, MITRE CAPEC and OWASP (Top 10, OpenCRE).
- CWE-295Improper Certificate Validation (opens in a new tab)
Base weaknessOWASP Top 10 A07:2025: Authentication Failures (opens in a new tab)
The product does not validate, or incorrectly validates, a certificate.
Architecture and Design · Implementation
Certificates should be carefully managed and checked to assure that data are encrypted with the intended owner's public key.
Implementation
If certificate pinning is being used, ensure that all relevant properties of the certificate are fully validated before the certificate is pinned, including the hostname.
- OWASP Cheat Sheets
From MITRE CWE, MITRE CAPEC and OWASP (Top 10, OpenCRE).
- CWE-93Improper Neutralization of CRLF Sequences ('CRLF Injection') (opens in a new tab)
Base weaknessOWASP Top 10 A05:2025: Injection (opens in a new tab)
The product uses CRLF (carriage return line feeds) as a special element, e.g. to separate lines or records, but it does not neutralize or incorrectly neutralizes CRLF sequences from inputs.
Implementation
Avoid using CRLF as a special sequence.
Implementation
Appropriately filter or quote CRLF sequences in user-controlled input.
- OWASP Cheat Sheets
- OWASP ASVS 4.0.3
From MITRE CWE, MITRE CAPEC and OWASP (Top 10, OpenCRE).
- CWE-770Allocation of Resources Without Limits or Throttling (opens in a new tab)
Base weaknessLikelihood of exploit: HighCWE Top 25 (2025): #25
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
Requirements
Clearly specify the minimum and maximum expectations for capabilities, and dictate which behaviors are acceptable when resource allocation reaches limits.
Architecture and Design
Limit the amount of resources that are accessible to unprivileged users. Set per-user limits for resources. Allow the system administrator to define these limits. Be careful to avoid CWE-410.
Architecture and Design
Design throttling mechanisms into the system architecture. The best protection is to limit the amount of resources that an unauthorized user can cause to be expended.
- OWASP Cheat Sheets
From MITRE CWE, MITRE CAPEC and OWASP (Top 10, OpenCRE).
- CWE-502Deserialization of Untrusted Data (opens in a new tab)
Base weaknessLikelihood of exploit: MediumCWE Top 25 (2025): #15OWASP Top 10 A08:2025: Software or Data Integrity Failures (opens in a new tab)
The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.
Architecture and Design · Implementation
If available, use the signing/sealing features of the programming language to assure that deserialized data has not been tainted. For example, a hash-based message authentication code (HMAC) could be used to ensure that data has not been modified.
Implementation
When deserializing data, populate a new object rather than just deserializing. The result is that the data flows through safe input validation and that the functions are safe.
Implementation
Explicitly define a final object() to prevent deserialization.
- OWASP Cheat Sheets
- Attack patterns
From MITRE CWE, MITRE CAPEC and OWASP (Top 10, OpenCRE).
- CWE-1333Inefficient Regular Expression Complexity (opens in a new tab)
Base weaknessLikelihood of exploit: High
The product uses a regular expression with a worst-case computational complexity that is inefficient and possibly exponential.
Architecture and Design
Use regular expressions that do not support backtracking, e.g. by removing nested quantifiers.
System Configuration
Set backtracking limits in the configuration of the regular expression implementation, such as PHP's pcre.backtrack_limit. Also consider limits on execution time for the process.
Implementation
Do not use regular expressions with untrusted input. If regular expressions must be used, avoid using backtracking in the expression.
- OWASP Cheat Sheets
- OWASP ASVS 4.0.3
- Attack patterns
From MITRE CWE, MITRE CAPEC and OWASP (Top 10, OpenCRE).
- CWE-1050Excessive Platform Resource Consumption within a Loop (opens in a new tab)
Base weakness
The product has a loop body or loop condition that contains a control element that directly or indirectly consumes platform resources, e.g. messaging, sessions, locks, or file descriptors.
- OWASP Cheat Sheets
- OWASP ASVS 4.0.3
From MITRE CWE, MITRE CAPEC and OWASP (Top 10, OpenCRE).
- CWE-551Incorrect Behavior Order: Authorization Before Parsing and Canonicalization (opens in a new tab)
Base weakness
If a web server does not fully parse requested URLs before it examines them for authorization, it may be possible for an attacker to bypass authorization protection.
Architecture and Design
URL Inputs should be decoded and canonicalized to the application's current internal representation before being validated and processed for authorization. Make sure that your application does not decode the same input twice.
From MITRE CWE, MITRE CAPEC and OWASP (Top 10, OpenCRE).
- CWE-284Improper Access Control (opens in a new tab)
Pillar weaknessCWE Top 25 (2025): #19OWASP Top 10 A01:2025: Broken Access Control (opens in a new tab)
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
MITRE discourages mapping vulnerabilities to this broad entry; the root cause is usually a more specific weakness.
Architecture and Design · Operation
Very carefully manage the setting, management, and handling of privileges. Explicitly manage trust zones in the software.
Architecture and Design · Separation of Privilege
Compartmentalize the system to have "safe" areas where trust boundaries can be unambiguously drawn. Do not allow sensitive data to go outside of the trust boundary and always be careful when interfacing with a compartment outside of the safe area.
- OWASP Cheat Sheets
From MITRE CWE, MITRE CAPEC and OWASP (Top 10, OpenCRE).
- CWE-290Authentication Bypass by Spoofing (opens in a new tab)
Base weaknessOWASP Top 10 A07:2025: Authentication Failures (opens in a new tab)
This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.
- OWASP Cheat Sheets
- Attack patterns
- Creating a Rogue Certification Authority Certificate (opens in a new tab)
- Web Services API Signature Forgery Leveraging Hash Function Extension Weakness (opens in a new tab)
- Signature Spoof (opens in a new tab)
- Signature Spoofing by Misrepresentation (opens in a new tab)
- Session Credential Falsification through Prediction (opens in a new tab)
From MITRE CWE, MITRE CAPEC and OWASP (Top 10, OpenCRE).
- CWE-266Incorrect Privilege Assignment (opens in a new tab)
Base weaknessOWASP Top 10 A06:2025: Insecure Design (opens in a new tab)
A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
Architecture and Design · Operation
Very carefully manage the setting, management, and handling of privileges. Explicitly manage trust zones in the software.
Architecture and Design · Operation · Environment Hardening
Run your code using the lowest privileges that are required to accomplish the necessary tasks. If possible, create isolated accounts with limited privileges that are only used for a single task. That way, a successful attack will not immediately give the attacker access to the rest of the software or its environment.
- OWASP Cheat Sheets
From MITRE CWE, MITRE CAPEC and OWASP (Top 10, OpenCRE).
- CWE-918Server-Side Request Forgery (SSRF) (opens in a new tab)
Base weaknessCWE Top 25 (2025): #22OWASP Top 10 A01:2025: Broken Access Control (opens in a new tab)
The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.
- OWASP Cheat Sheets
- OWASP ASVS 4.0.3
- Attack patterns
From MITRE CWE, MITRE CAPEC and OWASP (Top 10, OpenCRE).
- CWE-346Origin Validation Error (opens in a new tab)
Class weaknessOWASP Top 10 A07:2025: Authentication Failures (opens in a new tab)
The product does not properly verify that the source of data or communication is valid.
- OWASP Cheat Sheets
From MITRE CWE, MITRE CAPEC and OWASP (Top 10, OpenCRE).
- CWE-250Name not in the CWE catalogue (opens in a new tab)
- CWE-338Name not in the CWE catalogue (opens in a new tab)
- CWE-915Name not in the CWE catalogue (opens in a new tab)
- CWE-639Name not in the CWE catalogue (opens in a new tab)
- CWE-267Name not in the CWE catalogue (opens in a new tab)
- CWE-79Name not in the CWE catalogue (opens in a new tab)
- CWE-764Name not in the CWE catalogue (opens in a new tab)
- CWE-1341Name not in the CWE catalogue (opens in a new tab)
- CWE-606Name not in the CWE catalogue (opens in a new tab)
- CWE-1289Name not in the CWE catalogue (opens in a new tab)
- CWE-281Name not in the CWE catalogue (opens in a new tab)
- CWE-1284Name not in the CWE catalogue (opens in a new tab)
- CWE-772Name not in the CWE catalogue (opens in a new tab)
- CWE-347Name not in the CWE catalogue (opens in a new tab)
- CWE-476Name not in the CWE catalogue (opens in a new tab)
- CWE-91Name not in the CWE catalogue (opens in a new tab)
- CWE-776Name not in the CWE catalogue (opens in a new tab)
- CWE-88Name not in the CWE catalogue (opens in a new tab)
- CWE-120Name not in the CWE catalogue (opens in a new tab)
- CWE-1046Name not in the CWE catalogue (opens in a new tab)
- CWE-611Name not in the CWE catalogue (opens in a new tab)
- CWE-1286Name not in the CWE catalogue (opens in a new tab)
- CWE-94Name not in the CWE catalogue (opens in a new tab)
- CWE-201Name not in the CWE catalogue (opens in a new tab)
- CWE-289Name not in the CWE catalogue (opens in a new tab)
- CWE-358Name not in the CWE catalogue (opens in a new tab)
- CWE-78Name not in the CWE catalogue (opens in a new tab)
- CWE-824Name not in the CWE catalogue (opens in a new tab)
- CWE-303Name not in the CWE catalogue (opens in a new tab)
- CWE-681Name not in the CWE catalogue (opens in a new tab)
- CWE-125Name not in the CWE catalogue (opens in a new tab)
- CWE-1285Name not in the CWE catalogue (opens in a new tab)
- CWE-122Name not in the CWE catalogue (opens in a new tab)
- CWE-787Name not in the CWE catalogue (opens in a new tab)
- CWE-190Name not in the CWE catalogue (opens in a new tab)
- CWE-131Name not in the CWE catalogue (opens in a new tab)
- CWE-843Name not in the CWE catalogue (opens in a new tab)
- CWE-1389Name not in the CWE catalogue (opens in a new tab)
- CWE-444Name not in the CWE catalogue (opens in a new tab)
- GCVE source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory ID
- RHSA-2026:60520
- Vendor Severity
- critical
- CVE Count
- 143
- Additional Cves
- CVE-2025-66626, CVE-2025-71329, CVE-2025-71330, CVE-2026-0545, CVE-2026-2614, CVE-2026-5241, CVE-2026-5422, CVE-2026-6322, CVE-2026-6734, CVE-2026-8643, CVE-2026-9697, CVE-2026-12143, CVE-2026-12151, CVE-2026-12243, CVE-2026-12481, CVE-2026-13149, CVE-2026-13311, CVE-2026-13676, CVE-2026-13717, CVE-2026-14450, CVE-2026-15154, CVE-2026-15218, CVE-2026-15378, CVE-2026-15467, CVE-2026-15581, CVE-2026-16745, CVE-2026-18608, CVE-2026-18611, CVE-2026-18617, CVE-2026-18620, CVE-2026-18621, CVE-2026-18948, CVE-2026-18951, CVE-2026-18982, CVE-2026-25681, CVE-2026-27136, CVE-2026-32280, CVE-2026-32283, CVE-2026-33079, CVE-2026-33245, CVE-2026-33811, CVE-2026-33814, CVE-2026-34993, CVE-2026-35397, CVE-2026-39820, CVE-2026-39821, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39835, CVE-2026-40171, CVE-2026-41672, CVE-2026-41673, CVE-2026-41675, CVE-2026-42211, CVE-2026-42215, CVE-2026-42264, CVE-2026-42266, CVE-2026-42284, CVE-2026-42305, CVE-2026-42311, CVE-2026-42338, CVE-2026-42342, CVE-2026-42499, CVE-2026-42502, CVE-2026-42508, CVE-2026-42557, CVE-2026-44017, CVE-2026-44018, CVE-2026-44020, CVE-2026-44240, CVE-2026-44244, CVE-2026-44289, CVE-2026-44290, CVE-2026-44291, CVE-2026-44292, CVE-2026-44293, CVE-2026-44486, CVE-2026-44487, CVE-2026-44488, CVE-2026-44492, CVE-2026-44494, CVE-2026-44495, CVE-2026-44496, CVE-2026-44513, CVE-2026-44660, CVE-2026-44705, CVE-2026-44724, CVE-2026-44727, CVE-2026-44827, CVE-2026-44843, CVE-2026-45292, CVE-2026-45623, CVE-2026-45736, CVE-2026-45740, CVE-2026-45804, CVE-2026-46595, CVE-2026-46597, CVE-2026-46625, CVE-2026-47214, CVE-2026-48526, CVE-2026-48710, CVE-2026-48712, CVE-2026-48779, CVE-2026-48801, CVE-2026-49476, CVE-2026-49477, CVE-2026-49851, CVE-2026-49978, CVE-2026-50193, CVE-2026-53550, CVE-2026-54058, CVE-2026-54060, CVE-2026-54283, CVE-2026-54293, CVE-2026-55379, CVE-2026-55380, CVE-2026-55685, CVE-2026-56121, CVE-2026-56208, CVE-2026-56209, CVE-2026-56210, CVE-2026-56211, CVE-2026-58049, CVE-2026-59197, CVE-2026-59199, CVE-2026-59200, CVE-2026-59204, CVE-2026-59205, CVE-2026-59869, CVE-2026-59873, CVE-2026-59874, CVE-2026-59884, CVE-2026-59885, CVE-2026-59886, CVE-2026-64835, CVE-2026-64849, CVE-2026-69152, CVE-2026-69192, CVE-2026-69243, CVE-2026-69244
References
- access.redhat.com/errata/RHSA-2026:60520 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2025-66471 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2025-66626 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2025-71329 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2025-71330 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2026-0545 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2026-12143 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2026-12151 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2026-12243 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2026-12481 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2026-13149 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2026-13311 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2026-13676 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2026-13717 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2026-14450 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2026-15154 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2026-15218 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2026-15378 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2026-15467 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2026-15581 (opens in a new tab)
Community reviews
Related threats
- Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.2HighVulnerability
- Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.2HighVulnerability
- Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.2HighVulnerability
- Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Container Release UpdateCriticalVulnerability
- Red Hat Security Advisory: Red Hat OpenShift API for Data ProtectionHighVulnerability