Red Hat Security Advisory

RHSA-2026:49735

Kiali 2.27.2 for Red Hat OpenShift Service Mesh 3.4

Released 2026-08-03 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Service Mesh 3.4 registry.redhat.io/openshift-service-mesh/kiali-ossmc-rhel9, registry.redhat.io/openshift-service-mesh/kiali-rhel9

TI-2026-36811 CVE-2026-49978 · GHSA-rp9w-3fw7-7cwq

MEDIUM 61

DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG.

CVSS 4.0MEDIUM 6.3 Network No auth User interaction EPSS 0.00404 Published 2026-07-14 Partial fix · 3.4.6, 3.4.7 CWE-79

TI-2026-42691 CVE-2026-59877 · GHSA-j3f2-48v5-ccww

LOW 39

protobufjs compiles protobuf definitions into JavaScript (JS) functions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00365 Published 2026-07-08 Partial fix · 7.6.5, 8.6.6 CWE-835