Red Hat Security Advisory

RHSA-2026:5132

Kiali 1.73.28 for Red Hat OpenShift Service Mesh 2.6

Released 2026-03-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Service Mesh 2.6 registry.redhat.io/openshift-service-mesh/kiali-rhel8

Fixes 3 records

TI-2026-21992 CVE-2026-27606 · GHSA-mw96-cpmx-2vgc

Rollup 4 has Arbitrary File Write via Path Traversal

HIGH 79

Rollup is a module bundler for JavaScript.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.01651 Published 2026-02-25 Partial fix · 2.80.0, 3.30.0 +1 CWE-22

TI-2025-41709 CVE-2025-68121 · GHSA-h355-32pf-p2xm

Unexpected session resumption in crypto/tls

MEDIUM 51

During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00902 Published 2026-02-05 Partial fix · 1.24.13, 1.25.7 +1 CWE-295

TI-2025-38128 CVE-2025-61726 · GHSA-gm9r-q53w-2gh4

Memory exhaustion in query parameter parsing in net/url

MEDIUM 43

The net/url package does not set a limit on the number of query parameters in a query.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02292 Published 2026-01-28 Partial fix · 1.24.12, 1.25.6 CWE-770