RHSA-2026:46558HighCVSS 8.1

Red Hat Security Advisory: OpenShift Virtualization v4.17 Images

Published
July 27, 2026
Last Modified
July 27, 2026

🔗 CVE IDs covered (1)

📋 Description

CVE-2026-49978 — dompurify: DOMPurify: Cross-site scripting vulnerability allows code execution

🎯 Affected products3

  • Red Hat Container Native Virtualization 4.17
  • registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:631740800726708bb355e725d2b8c8837011c9169cccf38ed49e21f00370eeaf_amd64 as a component of Red Hat Container Native Virtualization 4.17
  • registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:fd8ac98be5903b4801fff71ecc6bfbc3d0aaa9e7ce19e280919d2eb14f0236bf_arm64 as a component of Red Hat Container Native Virtualization 4.17

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (4)