Important: Red Hat Security Advisory: OpenShift Container Platform 4.20.23 security and extras update

🗓️ 20 May 2026 08:31:01Reported by RedHatType

redhat🔗 access.redhat.com👁 51 Views

OpenShift Container Platform 4.20.23 security update fixes multiple CVEs including SPDY DoS.

Reporter	Title	Published	Views	Family All 4042
vulnersOsv	10by10-react-app (1.2.1), 1508-cli (>=1.0.0, <=1.0.6) +19158 more potentially affected by CVE-2021-23337 +1 more via lodash (>=4.0.0, <=4.17.20)	6 May 202116:05	–	vulnersosv
vulnersOsv	-fides-amor-et-lux (1.0.0), -graphql-codegen-client-preset-swc-test (>=2.0.1, <=2.0.2) +50514 more potentially affected by CVE-2021-23337 +1 more via lodash (>=4.0.0, <=4.17.23)	1 Apr 202623:51	–	vulnersosv
vulnersOsv	09-nodejs (1.0.0), 11.17r (1.0.0) +337 more potentially affected by CVE-2021-23337 +1 more via lodash.template (>=4.0.0, <=4.4.0)	6 May 202116:05	–	vulnersosv
vulnersOsv	31g-form-parser (1.0.107), @accounter/client (>=0.0.3-alpha-20241124130832-1498e8a00d2fa532e452b5ad126a753f4844a237, <=0.0.9-alpha-20260108115520-32a9af5faa8ef0a01fc31a81c85715be41f0f63f) +244 more potentially affected by CVE-2026-22029 via react-router (>=7.0.0, <=7.11.0-pre.0)	8 Jan 202620:54	–	vulnersosv
vulnersOsv	4game-support-ckeditor5-custom-build (>=0.0.1, <=0.0.5), 87-midnight-ckeditor5 (>=0.0.3, <=0.0.5) +5685 more potentially affected by CVE-2025-13465 +1 more via lodash-es (>=4.0.0, <=4.18.0)	31 Mar 202623:02	–	vulnersosv
vulnersOsv	@dojo/cli-test-intern (>=0.1.0, <=2.0.0-beta3.1), express_mvc (>=4.1.1, <=4.3.10) +7 more potentially affected by CVE-2021-23337 +1 more via lodash-amd (>=4.16.4, <=4.17.23)	1 Apr 202623:51	–	vulnersosv
vulnersOsv	@dojo/cli-test-intern (>=0.1.0, <=2.0.0-beta3.1), express_mvc (>=4.1.1, <=4.3.10) +7 more potentially affected by CVE-2025-13465 +1 more via lodash-amd (4.16.4)	21 Jan 202623:01	–	vulnersosv
vulnersOsv	4game-support-ckeditor5-custom-build (>=0.0.1, <=0.0.5), 87-midnight-ckeditor5 (>=0.0.3, <=0.0.5) +4545 more potentially affected by CVE-2025-13465 via lodash-es (>=4.0.0, <=4.17.22)	21 Jan 202623:01	–	vulnersosv
vulnersOsv	@akashic/akashic-cli (>=2.16.49, <=2.17.21), @akashic/akashic-cli-export (>=1.8.28, <=1.9.17) +253 more potentially affected by CVE-2025-13465 +1 more via lodash.unset (>=4.0.2, <=4.5.2)	21 Jan 202623:01	–	vulnersosv
vulnersOsv	@akashic/akashic-cli (>=2.16.49, <=2.17.21), @akashic/akashic-cli-export (>=1.8.28, <=1.9.17) +253 more potentially affected by CVE-2025-13465 +1 more via lodash.unset (>=4.0.2, <=4.5.2)	31 Mar 202623:02	–	vulnersosv

Source	Link
access	www.access.redhat.com/security/cve/CVE-2025-13465
access	www.access.redhat.com/security/cve/CVE-2025-15284
access	www.access.redhat.com/security/cve/CVE-2026-22029
access	www.access.redhat.com/security/cve/CVE-2026-29063
access	www.access.redhat.com/security/cve/CVE-2026-35469
access	www.access.redhat.com/security/cve/CVE-2026-4800
access	www.access.redhat.com/security/updates/classification/

10 Sep 2026 17:26Current

7High risk

Vulners AI Score7

CVSS 3.18.8 - 9.8

CVSS 48.7

EPSS0.02759

SSVC

spdy denial service prototype pollution lodash immutable JavaScript exploit lodash template import qs denial service open redirect xss