Red Hat Security Advisory

RHSA-2026:53840

OpenShift Virtualization v4.15 Images

Released 2026-08-11 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Container Native Virtualization 4.15 registry.redhat.io/container-native-virtualization/kubevirt-console-plugin-rhel9

TI-2026-42684 CVE-2026-59869 · GHSA-52cp-r559-cp3m

HIGH 72

js-yaml is a JavaScript YAML parser and dumper.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00585 Published 2026-07-08 Partial fix · 3.15.0, 4.3.0 CWE-407

TI-2026-32429 CVE-2026-44495 · GHSA-3g43-6gmg-66jw

HIGH 69

Axios is a promise based HTTP client for the browser and Node.js.

CVSS 3.1HIGH 7.7 Network No auth No interaction EPSS 0.00854 Published 2026-06-11 Partial fix · 1.15.2, 0.31.1 CWE-1321

TI-2026-36811 CVE-2026-49978 · GHSA-rp9w-3fw7-7cwq

MEDIUM 61

DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG.

CVSS 4.0MEDIUM 6.3 Network No auth User interaction EPSS 0.00404 Published 2026-07-14 Partial fix · 3.4.6, 3.4.7 CWE-79

TI-2026-28989 CVE-2026-40175 · GHSA-fvcv-3m26-pcqx

MEDIUM 57

Axios is a promise based HTTP client for the browser and Node.js.

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.01979 Published 2026-04-10 Partial fix · 1.15.0, 0.31.0 CWE-113