RHSA-2026:54527HighCVSS 8.1

Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.19.1

Published
August 13, 2026
Last Modified
August 21, 2026

🔗 CVE IDs covered (3)

CVE-2026-27136 →CVE-2026-42502 →CVE-2026-25681 →

📋 Description

CVE-2026-25681 — golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting CVE-2026-27136 — golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass CVE-2026-42502 — golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering

🎯 Affected products5

  • Cert Manager support for Red Hat OpenShift release 1.19
  • registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:3df44c7ce6c8247cc36a057d48015803177dd651b10b74c6e80f43755afffa0a_arm64 as a component of Cert Manager support for Red Hat OpenShift release 1.19
  • registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:4bc4f32e99ffff3a93dce000e9cb36c2cee6d576049bb36d5d91c8afda5eabad_s390x as a component of Cert Manager support for Red Hat OpenShift release 1.19
  • registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:6468289d06d9d44dccfd3928b7ae6fc7faa5748572357367d04a20d6403df8fa_amd64 as a component of Cert Manager support for Red Hat OpenShift release 1.19
  • registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9@sha256:a32782599959e25eb2174dc87ea0d9e3a9c6daebf4f1fd6c4fb9204a10af885d_ppc64le as a component of Cert Manager support for Red Hat OpenShift release 1.19

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. The steps to apply the upgraded images are different depending on the installation plan approval policy you used when installing the cert-manager Operator for Red Hat OpenShift. - If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a new version of the Operator. No further action is required to upgrade. This is the default setting. - If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator. See https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional information. Workaround: To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Workaround: Applications utilizing `golang.org/x/net/html` should implement robust sanitization of all untrusted HTML input before rendering to prevent the creation of unexpected HTML structures that could facilitate XSS attacks. If an application does not require rendering arbitrary HTML, it should avoid processing such input.

🔗 References (7)