Red Hat Security Advisory

RHSA-2026:2149

Kiali 2.17.3 for Red Hat OpenShift Service Mesh 3.2

Released 2026-02-05 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Service Mesh 3.2 registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9, registry.redhat.io/openshift-service-mesh/kiali-rhel9

TI-2025-12309 CVE-2025-13465 · GHSA-xxjr-mmjv-4gpg

MEDIUM 40

The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.01823 Published 2026-01-21 Partial fix · 4.17.23, 4.18.0 CWE-1321

TI-2026-17723 CVE-2026-22029 · GHSA-2w69-qvjg-hvjx

LOW 38

React Router is a router for React.

CVSS 3.1HIGH 8.0 Network No auth User interaction EPSS 0.00866 Published 2026-01-10 Partial fix · 7.12.0, 1.23.2 CWE-79

TI-2025-13959 CVE-2025-15284 · GHSA-6rw7-vpxm-498p

LOW 34

Improper Input Validation vulnerability in qs (parse modules) allows HTTP DoS.This issue affects qs: < 6.14.1.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.0045 Published 2025-12-29 Partial fix · 6.14.1 CWE-20

TI-2025-38131 CVE-2025-61729 · GHSA-7c64-f9jr-v9h2

LOW 33

Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0049 Published 2025-12-02 Partial fix · 1.24.11, 1.25.5 CWE-295