RHSA-2026:98902MediumCVSS 7.5

Red Hat Security Advisory: OpenShift Virtualization v4.18 Images

Published
November 11, 2026
Last Modified
November 13, 2026

🔗 CVE IDs covered (1)

📋 Description

CVE-2026-84375 — js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing

🎯 Affected products4

  • Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:3d244e25ec9956cd26fda7cbc2c1adf4bd06d900c526824af4d4337f94d23cc9_s390x as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:4118507f3fa500e3e7d33e4193eaf5b8558e92e72077042c8f06e3c3c47e5435_amd64 as a component of Red Hat Container Native Virtualization 4.18
  • registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9@sha256:bbd84803cec8a1cbb7b065499849082bbf582425076be8e4dcc42cc5c8870808_arm64 as a component of Red Hat Container Native Virtualization 4.18

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (4)