RHSA-2026:46558HighCVSS 8.1
Red Hat Security Advisory: OpenShift Virtualization v4.17 Images
🔗 CVE IDs covered (1)
📋 Description
CVE-2026-49978 — dompurify: DOMPurify: Cross-site scripting vulnerability allows code execution
🎯 Affected products3
- Red Hat Container Native Virtualization 4.17
- registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:631740800726708bb355e725d2b8c8837011c9169cccf38ed49e21f00370eeaf_amd64 as a component of Red Hat Container Native Virtualization 4.17
- registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:fd8ac98be5903b4801fff71ecc6bfbc3d0aaa9e7ce19e280919d2eb14f0236bf_arm64 as a component of Red Hat Container Native Virtualization 4.17
✅ Remediation
Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258