Threats Tagged 'cve-2026-4645'

Red Hat has released OpenShift Compliance Operator version 1. 9. 0, which includes bug fixes and enhancements addressing multiple security vulnerabilities identified by CVE-2025-52881 and six additional CVEs. The update improves compliance checks, supports new CIS OpenShift benchmarks, and resolves issues such as file integrity operator incompatibility and platform scan timeouts. This advisory covers a set of high-severity vulnerabilities affecting the OpenShift Compliance Operator component. No known exploits are reported in the wild at this time.

Red Hat OpenShift distributed tracing platform (Tempo) 3. 9. 2 addresses multiple security vulnerabilities including an authorization bypass in gRPC-Go due to improper HTTP/2 :path validation, denial-of-service flaws in XPath processing and JSON parsing, and several issues in Go standard libraries affecting certificate validation, race conditions, and resource exhaustion. These fixes prevent unauthorized access, denial-of-service conditions, and potential code execution paths. No breaking changes or deprecations are introduced in this release.