RHSA-2026:43625HighCVSS 8.1

Red Hat Security Advisory: OpenShift Virtualization v4.22 Images

Published
July 22, 2026
Last Modified
July 27, 2026

🔗 CVE IDs covered (1)

📋 Description

CVE-2026-49978 — dompurify: DOMPurify: Cross-site scripting vulnerability allows code execution

🎯 Affected products4

  • Red Hat Container Native Virtualization 4.22
  • registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:ccca927ed5bc13a73798de941a82cd5f5248f3c7734451f40e0db4a6bfa8e609_amd64 as a component of Red Hat Container Native Virtualization 4.22
  • registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:d5baeb7beab6cc11096bf75b71d42d1d356f0f2aff6d5eabc41715fd5a15088d_s390x as a component of Red Hat Container Native Virtualization 4.22
  • registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:ffb2fba6539cb7454adbe3bd55a3120f2d8d6c74ce39a86da002ac95dc27f448_arm64 as a component of Red Hat Container Native Virtualization 4.22

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (4)