Red Hat Logging Subsystem for Red Hat OpenShift

• CVE-2026-16242 Critical 9.4 Hypershift: konnectivity proxy-server accepts agent connections without validating client certificates 0.9%
• CVE-2026-10609 Medium 6.8 Openshift/cluster-logging-operator: cluster logging operator creates and forwards serviceaccount tokens without verifying clf creator authorization 0.4%
• CVE-2026-0810 High 7.1 Gix-date: gix-date: undefined behavior due to invalid string generation 0.2%
• CVE-2024-11831 Medium 5.4 Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript 1.1%
• CVE-2024-5037 High 7.5 Openshift/telemeter: iss check during jwt authentication can be bypassed 0.8%
• CVE-2024-0874 Medium 5.3 Coredns: cd bit response is cached and served later 0.8%