RHSA-2026:46539HighCVSS 8.1

Red Hat Security Advisory: OpenShift Virtualization v4.14 Images

Published
July 27, 2026
Last Modified
July 27, 2026

🔗 CVE IDs covered (1)

📋 Description

CVE-2026-49978 — dompurify: DOMPurify: Cross-site scripting vulnerability allows code execution

🎯 Affected products3

  • Red Hat Container Native Virtualization 4.14
  • registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:16c7c089b09d001af38a432feb6ced7a2b6a3ae37272a8d9bb9e4bfc8c76ef3c_amd64 as a component of Red Hat Container Native Virtualization 4.14
  • registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:ea4890f4be1cbf6fd418e9fcb1d7d4a9c8501d59d015c0d053a957a6d58eb267_arm64 as a component of Red Hat Container Native Virtualization 4.14

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (4)