RHSA-2026:43625HighCVSS 8.1
Red Hat Security Advisory: OpenShift Virtualization v4.22 Images
🔗 CVE IDs covered (1)
📋 Description
CVE-2026-49978 — dompurify: DOMPurify: Cross-site scripting vulnerability allows code execution
🎯 Affected products4
- Red Hat Container Native Virtualization 4.22
- registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:ccca927ed5bc13a73798de941a82cd5f5248f3c7734451f40e0db4a6bfa8e609_amd64 as a component of Red Hat Container Native Virtualization 4.22
- registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:d5baeb7beab6cc11096bf75b71d42d1d356f0f2aff6d5eabc41715fd5a15088d_s390x as a component of Red Hat Container Native Virtualization 4.22
- registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:ffb2fba6539cb7454adbe3bd55a3120f2d8d6c74ce39a86da002ac95dc27f448_arm64 as a component of Red Hat Container Native Virtualization 4.22
✅ Remediation
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258