Important: Red Hat Security Advisory: Custom Metrics Autoscaler Operator for Red Hat OpenShift 2.19.0-3 This version is a rebuild of 2.19.0 using a newer base image, Go modules and Go compiler, and two bug fixes. See the release notes for more information.

🗓️ 02 Sep 2026 23:29:39Reported by RedHatType

redhat🔗 access.redhat.com👁 19 Views

Custom Metrics Autoscaler Operator for OpenShift 2.19.0-3 rebuilt with newer base image and Go.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to Improper Certificate Validation in crypto/x509 [CVE-2025-61729]	14 Apr 202616:58	–	ibm
IBM Security Bulletins	Security Bulletin: Impacted IBM Optim for z/OS 1.0.0, 1.1.0 and 1.2.0 by vulnerabilities in jackc/Pgx, cloudflare/cfSSL, x/net	28 Sep 202606:49	–	ibm
IBM Security Bulletins	Security Bulletin: Impacted IBM Optim 1.0.0, 1.1.0 and 1.2.0 by vulnerabilities in jackc/pgx	21 Sep 202617:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Financial Transaction Manager is impacted by multiple vulnerabilities in RedHat Proxy for Kubernetes RBAC authorization	13 Oct 202618:23	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities addressed with IBM Business Automation Workflow cumulative fixes April 2026	27 May 202615:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Verify Antenna is affected by multiple vulnerabilities	6 Oct 202614:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	8 Sep 202617:48	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in golang.org/x/text bundled with IBM Fusion and IBM Fusion HCI.	2 Oct 202616:47	–	ibm
IBM Security Bulletins	Security Bulletin: Certificate Name Constraints Bypass via Wildcard SANs affects watsonx.data	8 Apr 202610:48	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with Cloud Pak foundational services 4.18.0 shipped with IBM Cloud Pak for Business Automation iFixes for June 2026	29 Jun 202610:11	–	ibm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2025-61729
access	www.access.redhat.com/security/cve/CVE-2026-33816
access	www.access.redhat.com/security/cve/CVE-2026-33818
access	www.access.redhat.com/security/cve/CVE-2026-56852
access	www.access.redhat.com/security/cve/CVE-2026-56853
access	www.access.redhat.com/security/cve/CVE-2026-56858
access	www.access.redhat.com/security/cve/CVE-2026-56859
access	www.access.redhat.com/security/cve/CVE-2026-56860
access	www.access.redhat.com/security/cve/CVE-2026-56862
access	www.access.redhat.com/security/cve/CVE-2026-79921

17 Oct 2026 05:07Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.19.8

CVSS 48.9

EPSS0.00858

SSVC

Custom Metrics Autoscaler Red Hat OpenShift Rebuild Base Image Go Compiler KEDA