Red Hat Security Advisory

RHSA-2026:36108

OpenShift Virtualization v4.13 Images

Released 2026-07-07 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Container Native Virtualization 4.13 registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9

TI-2026-32427 CVE-2026-44492 · GHSA-pjwm-pj3p-43mv

HIGH 76

Axios is a promise based HTTP client for the browser and Node.js.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.1228 Published 2026-06-11 Partial fix · 1.16.0, 0.32.0 CWE-918

TI-2026-32428 CVE-2026-44494 · GHSA-35jp-ww65-95wh

HIGH 73

Axios is a promise based HTTP client for the browser and Node.js.

CVSS 3.1HIGH 8.7 Network No auth No interaction EPSS 0.01057 Published 2026-06-11 Partial fix · 1.16.0 CWE-1321

TI-2026-32429 CVE-2026-44495 · GHSA-3g43-6gmg-66jw

HIGH 69

Axios is a promise based HTTP client for the browser and Node.js.

CVSS 3.1HIGH 7.7 Network No auth No interaction EPSS 0.00854 Published 2026-06-11 Partial fix · 1.15.2, 0.31.1 CWE-1321

TI-2026-29849 CVE-2026-41240 · GHSA-h7mw-gpvr-xq4m

MEDIUM 60

DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG.

CVSS 4.0MEDIUM 6.0 Network No auth User interaction EPSS 0.00313 Published 2026-04-23 Partial fix · 3.4.0 CWE-183