Red Hat OpenShift GitOps 1.17 vulnerabilities

2 known vulnerabilities in Red Hat OpenShift GitOps 1.17 from Red Hat. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  urllib3: Improper Handling of Highly Compressed Data (Data Amplification)

  CVE-2026-21441Jan 7, 2026Urllib3EPSS 2.92%

  urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. urllib3 can perform decodin

• 9.1 Critical severity

  gitops-operator: Incorrect Privilege Assignment

  CVE-2025-13888Dec 15, 2025Redhat-developer

  A flaw was found in OpenShift GitOps. Namespace admins can create ArgoCD Custom Resources (CRs) that trick the system into granting them elevated permissions in other namespaces, including privileged namespaces. An authenticated attacker can then use these ele