Critical: Red Hat Security Advisory: OpenShift Container Platform 4.22.8 bug fix and security update

🗓️ 04 Aug 2026 12:03:17Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 3 Views

Critical security update for OpenShift Container Platform 4.22.8 with bug fixes and enhancements.

Reporter	Title	Published	Views	Family All 3015
vulnersOsv	net.enilink.platform:net.enilink.platform.web (=1.6.0), org.webjars.npm:formio__core (=2.6.0) +1 more potentially affected by CVE-2026-49978 via org.webjars.npm:dompurify (>=3.1.7 <=3.3.0)	15 Jun 202620:01	–	vulnersosv
vulnersOsv	org.webjars.npm:autobahn (=0.11.2), org.webjars.npm:blockly (>=9.3.2 <=10.4.1) +17 more potentially affected by CVE-2026-45736 via org.webjars.npm:ws (>=8.11.0 <=8.2.3)	11 May 202621:00	–	vulnersosv
vulnersOsv	com.alilitech:boot-plus-log (>=2.1.0 <=2.1.5), com.github.linyuzai:concept-plugin-spring-boot-starter (>=2.0.0 <=3.0.0) +38 more potentially affected by CVE-2026-12143 via org.webjars.npm:form-data (>=4.0.4 <=4.0.5)	12 Jun 202620:12	–	vulnersosv
vulnersOsv	1router (>=0.3.96 <=1.0.2), 9router-custom (=0.3.55) +2210 more potentially affected by CVE-2026-49978 via dompurify (>=3.0.0 <=3.4.6)	15 Jun 202620:01	–	vulnersosv
vulnersOsv	-react-file-list-components (=1.1.1), 01basicreact (>=0.1.0 <=0.1.9) +45932 more potentially affected by CVE-2026-12143 via form-data (>=3.0.0 <=3.0.4)	12 Jun 202620:12	–	vulnersosv
vulnersOsv	-fides-amor-et-lux (=1.0.0), -price-checker (>=1.0.0 <=1.0.5) +35597 more potentially affected by CVE-2026-45736 via ws (>=8.0.0 <=8.20.0)	18 May 202619:02	–	vulnersosv
vulnersOsv	@activeboxes/piece-sftp (=0.2.6), @activepieces/piece-apify (=0.2.1) +28 more potentially affected by CVE-2026-44240 via basic-ftp (>=5.0.2 <=5.3.0)	6 May 202619:37	–	vulnersosv
vulnersOsv	-react-file-list-components (=1.1.1), 01basicreact (>=0.1.0 <=0.1.9) +45932 more potentially affected by CVE-2026-12143 via form-data (>=3.0.0 <=3.0.4)	15 Jun 202617:26	–	vulnersosv
vulnersOsv	-fides-amor-et-lux (=1.0.0), -price-checker (>=1.0.0 <=1.0.5) +35597 more potentially affected by CVE-2026-45736 via ws (>=8.0.0 <=8.20.0)	11 May 202621:00	–	vulnersosv
Vulnrichment	CVE-2026-12143 form-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection)	12 Jun 202618:01	–	vulnrichment

Source	Link
access	www.access.redhat.com/security/cve/CVE-2026-12143
access	www.access.redhat.com/security/cve/CVE-2026-16242
access	www.access.redhat.com/security/cve/CVE-2026-39829
access	www.access.redhat.com/security/cve/CVE-2026-44240
access	www.access.redhat.com/security/cve/CVE-2026-45736
access	www.access.redhat.com/security/cve/CVE-2026-46597
access	www.access.redhat.com/security/cve/CVE-2026-49978
access	www.access.redhat.com/security/updates/classification/

05 Aug 2026 02:48Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.17.5 - 9.4

CVSS 48.7

EPSS0.00745

SSVC

openshift container platform security update critical advisory bug fix release notes container images