Red Hat Openshift Data Foundation 4.17 vulnerabilities

3 known vulnerabilities in Red Hat Openshift Data Foundation 4.17 from Red Hat. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  NGINX Plus: Heap-based Buffer Overflow

  CVE-2026-42945May 13, 2026F5EPSS 68%

  NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_rewrite_module module. This vulnerability exists when the rewrite directive is followed by a rewrite, if, or set directive and an unnamed Perl-Compatible Regular Expression (PCRE) capture (f

• 7.5 High severity

  go-jose: Uncaught Exception

  CVE-2026-34986Apr 6, 2026Go-jose

  Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards. Prior to 4.1.4 and 3.0.5, decrypting a JSO

• 9.8 Critical severity

  lodash: Improper Control of Generation of Code

  CVE-2026-4800Mar 31, 2026LodashEPSS 2.81%

  The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names, and both paths flow into the same Function() constructor sink. When an application passes untrusted input as o