RHSA-2026:46539HighCVSS 8.1
Red Hat Security Advisory: OpenShift Virtualization v4.14 Images
🔗 CVE IDs covered (1)
📋 Description
CVE-2026-49978 — dompurify: DOMPurify: Cross-site scripting vulnerability allows code execution
🎯 Affected products3
- Red Hat Container Native Virtualization 4.14
- registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:16c7c089b09d001af38a432feb6ced7a2b6a3ae37272a8d9bb9e4bfc8c76ef3c_amd64 as a component of Red Hat Container Native Virtualization 4.14
- registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:ea4890f4be1cbf6fd418e9fcb1d7d4a9c8501d59d015c0d053a957a6d58eb267_arm64 as a component of Red Hat Container Native Virtualization 4.14
✅ Remediation
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258