RHSA-2026:46685HighCVSS 8.1

Red Hat Security Advisory: OpenShift Virtualization v4.19 Images

Published
July 27, 2026
Last Modified
July 27, 2026

🔗 CVE IDs covered (1)

CVE-2026-44990 →

📋 Description

CVE-2026-44990 — sanitize-html: sanitize-html: Stored Cross-Site Scripting via HTML sanitizer bypass

🎯 Affected products4

  • Red Hat Container Native Virtualization 4.19
  • registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:3eaf423aed9cdb9cdb90772b282298de8396be63ae9c5bfeefb71835c668a18a_s390x as a component of Red Hat Container Native Virtualization 4.19
  • registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:946645ea61d31185f5e52d12b67aac639f9bc64de03f846ae9250171a1b608b0_arm64 as a component of Red Hat Container Native Virtualization 4.19
  • registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:ec0830c6ab600e557a1acfb9cf47a66183baf25f812b869672f7a3e3746e7a8a_amd64 as a component of Red Hat Container Native Virtualization 4.19

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (4)