openshift4/ose-oauth-server-rhel9 vulnerabilities

CVEs whose affected-version data names the openshift4/ose-oauth-server-rhel9 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-49329High· 7.5

3w ago

Openshift/oauth-server: openshift/oauth-server: quadratic-time dos via accept-language header underscore bypass on unauthenticated login endpoints

A flaw was found in openshift/oauth-server. The OAuth login and error page endpoints pass the unauthenticated Accept-Language header to golang.org/x/text/language.ParseAcceptLanguage() without input validation. A bypass of the CVE-2022-3…

▾ TwilightRed Hat · openshift4/ose-oauth-server-rhel8EPSS 0.63%via CVEORG