Red Hat Security Advisory

RHSA-2026:2145

Kiali 1.73.26 for Red Hat OpenShift Service Mesh 2.6

Released 2026-02-05 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Service Mesh 2.6 registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel8, registry.redhat.io/openshift-service-mesh/kiali-rhel8

TI-2025-12309 CVE-2025-13465 · GHSA-xxjr-mmjv-4gpg

MEDIUM 40

The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.01823 Published 2026-01-21 Partial fix · 4.17.23, 4.18.0 CWE-1321

TI-2025-13959 CVE-2025-15284 · GHSA-6rw7-vpxm-498p

LOW 34

Improper Input Validation vulnerability in qs (parse modules) allows HTTP DoS.This issue affects qs: < 6.14.1.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.0045 Published 2025-12-29 Partial fix · 6.14.1 CWE-20