[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f1lFWvEN16q21be-Cf3tDSTyPOJEJOSdBVxTxMIZIFsI":3,"g5a-ex:redhat\u002Fopenshift_container_platform_for_linuxone@*":141,"g5a-family:redhat\u002Fopenshift_container_platform_for_linuxone":143},{"success":4,"data":5},true,{"product":6,"versions":46,"topVulnerabilitiesByEpss":59,"kevVulnerabilities":118,"seoMetadata":119,"meta":138},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":45},"redhat","openshift_container_platform_for_linuxone",12,15,0,"2025-06-12",[14,18,21,24,27,30,32,34,36,38,40,42],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"4.1",1,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"4.10",9,{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},"4.11",2,{"version":25,"cve_count":26,"kev_count":11,"has_kev":17},"4.12",4,{"version":28,"cve_count":29,"kev_count":11,"has_kev":17},"4.13",3,{"version":31,"cve_count":29,"kev_count":11,"has_kev":17},"4.14",{"version":33,"cve_count":29,"kev_count":11,"has_kev":17},"4.15",{"version":35,"cve_count":23,"kev_count":11,"has_kev":17},"4.16",{"version":37,"cve_count":16,"kev_count":11,"has_kev":17},"4.17",{"version":39,"cve_count":16,"kev_count":11,"has_kev":17},"4.18",{"version":41,"cve_count":16,"kev_count":11,"has_kev":17},"4.2",{"version":43,"cve_count":44,"kev_count":11,"has_kev":17},"4.9",8,"Openshift Container Platform For Linuxone by Redhat is a technology product with 12 tracked versions and 15 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[47,48,49,50,51,52,53,54,55,56,57,58],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},{"version":25,"cve_count":26,"kev_count":11,"has_kev":17},{"version":28,"cve_count":29,"kev_count":11,"has_kev":17},{"version":31,"cve_count":29,"kev_count":11,"has_kev":17},{"version":33,"cve_count":29,"kev_count":11,"has_kev":17},{"version":35,"cve_count":23,"kev_count":11,"has_kev":17},{"version":37,"cve_count":16,"kev_count":11,"has_kev":17},{"version":39,"cve_count":16,"kev_count":11,"has_kev":17},{"version":41,"cve_count":16,"kev_count":11,"has_kev":17},{"version":43,"cve_count":44,"kev_count":11,"has_kev":17},[60,68,73,80,85,89,95,101,107,113],{"cveId":61,"description":62,"publishedDate":63,"cvssScore":64,"cvssVersion":65,"severity":66,"isKev":17,"epssScore":67},"CVE-2020-8945","The proglottis Go wrapper before 0.1.1 for the GPGME library has a use-after-free, as demonstrated by use for container image pulls by Docker or CRI-O. This leads to a crash or potential code execution during GPG signature verification.","2020-02-12",7.5,"v3.1","High",0.05071,{"cveId":69,"description":70,"publishedDate":71,"cvssScore":64,"cvssVersion":65,"severity":66,"isKev":17,"epssScore":72},"CVE-2024-1635","A vulnerability was found in Undertow. This vulnerability impacts a server that supports the wildfly-http-client protocol. Whenever a malicious user opens and closes a connection with the HTTP port of the server and then closes the connection immediately, the server will end with both memory and open file limits exhausted at some point, depending on the amount of memory available. \r\n\r\nAt HTTP upgrade to remoting, the WriteTimeoutStreamSinkConduit leaks connections if RemotingConnection is closed by Remoting ServerConnectionOpenListener. Because the remoting connection originates in Undertow as part of the HTTP upgrade, there is an external layer to the remoting connection. This connection is unaware of the outermost layer when closing the connection during the connection opening procedure. Hence, the Undertow WriteTimeoutStreamSinkConduit is not notified of the closed connection in this scenario. Because WriteTimeoutStreamSinkConduit creates a timeout task, the whole dependency tree leaks via that task, which is added to XNIO WorkerThread. So, the workerThread points to the Undertow conduit, which contains the connections and causes the leak.","2024-02-19",0.04572,{"cveId":74,"description":75,"publishedDate":76,"cvssScore":77,"cvssVersion":65,"severity":78,"isKev":17,"epssScore":79},"CVE-2024-8883","A misconfiguration flaw was found in Keycloak. This issue can allow an attacker to redirect users to an arbitrary URL if a 'Valid Redirect URI' is set to http:\u002F\u002Flocalhost or http:\u002F\u002F127.0.0.1, enabling sensitive information such as authorization codes to be exposed to the attacker, potentially leading to session hijacking.","2024-09-19",6.1,"Medium",0.02112,{"cveId":81,"description":82,"publishedDate":83,"cvssScore":64,"cvssVersion":65,"severity":66,"isKev":17,"epssScore":84},"CVE-2023-1108","A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates.","2023-09-14",0.01771,{"cveId":86,"description":87,"publishedDate":12,"cvssScore":64,"cvssVersion":65,"severity":66,"isKev":17,"epssScore":88},"CVE-2025-6021","A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can result in memory corruption or a denial of service when processing crafted input.",0.01367,{"cveId":90,"description":91,"publishedDate":92,"cvssScore":93,"cvssVersion":65,"severity":78,"isKev":17,"epssScore":94},"CVE-2024-9676","A vulnerability was found in Podman, Buildah, and CRI-O. A symlink traversal vulnerability in the containers\u002Fstorage library can cause Podman, Buildah, and CRI-O to hang and result in a denial of service via OOM kill when running a malicious image using an automatically assigned user namespace (`--userns=auto` in Podman and Buildah). The containers\u002Fstorage library will read \u002Fetc\u002Fpasswd inside the container, but does not properly validate if that file is a symlink, which can be used to cause the library to read an arbitrary file on the host.","2024-10-15",6.5,0.01336,{"cveId":96,"description":97,"publishedDate":98,"cvssScore":99,"cvssVersion":65,"severity":78,"isKev":17,"epssScore":100},"CVE-2022-3916","A flaw was found in the offline_access scope in Keycloak. This issue would affect users of shared computers more (especially if cookies are not cleared), due to a lack of root session validation, and the reuse of session ids across root and user authentication sessions. This enables an attacker to resolve a user session attached to a previously authenticated user; when utilizing the refresh token, they will be issued a token for the original user.","2023-09-20",6.8,0.00952,{"cveId":102,"description":103,"publishedDate":104,"cvssScore":105,"cvssVersion":65,"severity":66,"isKev":17,"epssScore":106},"CVE-2023-6291","A flaw was found in the redirect_uri validation logic in Keycloak. This issue may allow a bypass of otherwise explicitly allowed hosts. A successful attack may lead to an access token being stolen, making it possible for the attacker to impersonate other users.","2024-01-26",7.1,0.0095,{"cveId":108,"description":109,"publishedDate":110,"cvssScore":111,"cvssVersion":65,"severity":78,"isKev":17,"epssScore":112},"CVE-2023-5625","A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419 not being applied for all builds of all products.","2023-11-01",5.3,0.00795,{"cveId":114,"description":115,"publishedDate":116,"cvssScore":93,"cvssVersion":65,"severity":78,"isKev":17,"epssScore":117},"CVE-2024-4629","A vulnerability was found in Keycloak. This flaw allows attackers to bypass brute force protection by exploiting the timing of login attempts. By initiating multiple login requests simultaneously, attackers can exceed the configured limits for failed attempts before the system locks them out. This timing loophole enables attackers to make more guesses at passwords than intended, potentially compromising account security on affected systems.","2024-09-03",0.00793,[],{"title":120,"metaDescription":121,"keywords":122,"structuredData":123},"Openshift Container Platform For Linuxone by Redhat - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Openshift Container Platform For Linuxone by Redhat covering 12 versions with 15 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Openshift Container Platform For Linuxone vulnerabilities, Openshift Container Platform For Linuxone security, Openshift Container Platform For Linuxone CVE, Redhat Openshift Container Platform For Linuxone, Openshift Container Platform For Linuxone threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":124,"@type":125,"name":126,"description":121,"url":127,"manufacturer":128,"applicationCategory":132,"softwareVersion":133,"mainEntity":134},"https:\u002F\u002Fschema.org","SoftwareApplication","Openshift Container Platform For Linuxone","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Fopenshift_container_platform_for_linuxone",{"@type":129,"name":130,"url":131},"Organization","Redhat","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fredhat","Security Software","12 versions tracked",{"@type":135,"name":136,"description":137,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Openshift Container Platform For Linuxone Security Vulnerabilities","Security vulnerabilities affecting Openshift Container Platform For Linuxone by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":139,"apiVersion":140},"2026-10-17T14:37:29.474Z","3.0",{"rows":142,"total":11,"capped":17,"failed":11},[],[]]