Red Hat Security Advisory

RHSA-2026:84968

OpenShift Virtualization v4.16 Images

Released 2026-10-19 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Container Native Virtualization 4.16 registry.redhat.io/container-native-virtualization/kubemacpool-rhel9

Fixes 1 record

TI-2026-40996 CVE-2026-56858 · GHSA-c974-w86c-vpfw

Fix Javascript regexp context tracking in html/template

LOW 27

Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0031 Published 2026-08-13 Partial fix · 1.25.13, 1.26.6 +1 CWE-79