Vulnerabilities of Red Hat Red Hat OpenShift Virtualization 4

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-25639	Axios is a promise based HTTP client for the browser and Node.js	7.5 High	Feb 9, 2026
CVE-2025-61732	A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary	8.6 High	Feb 5, 2026
CVE-2025-61726	The net/url package does not set a limit on the number of query parameters in a query	7.5 High	Jan 28, 2026
CVE-2025-61731	Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of…	7.8 High	Jan 28, 2026
CVE-2025-14525	A flaw was found in kubevirt	6.4 Medium	Jan 26, 2026
CVE-2025-14459	A flaw was found in KubeVirt Containerized Data Importer (CDI)	8.5 High	Jan 26, 2026
CVE-2025-13465	The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution	6.9 Medium	Jan 21, 2026
CVE-2026-22029	React Router is a router for React	8.0 High	Jan 10, 2026
CVE-2025-61686	React Router is a router for React	9.1 Critical	Jan 10, 2026
CVE-2025-14946	Libnbd: libnbd: arbitrary code execution via ssh argument injection through a malicious uri	4.8 Medium	Dec 19, 2025
CVE-2025-57848	A container privilege escalation flaw was found in certain Container-native Virtualization images	6.4 Medium	Oct 23, 2025
CVE-2025-7195	Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used…	6.4 Medium	Aug 7, 2025
CVE-2025-8556	A flaw was found in CIRCL's implementation of the FourQ elliptic curve	3.7 Low	Aug 6, 2025
CVE-2024-9355	Golang-fips: golang fips zeroed buffer	6.5 Medium	Oct 1, 2024
CVE-2024-4467	Qemu-kvm: 'qemu-img info' leads to host file read/write	7.8 High	Jul 2, 2024
CVE-2024-3727	Containers/image: digest type does not guarantee valid type	8.3 High	May 9, 2024
CVE-2024-31420	A NULL pointer dereference flaw was found in KubeVirt	6.5 Medium	Apr 3, 2024
CVE-2024-31419	An information disclosure flaw was found in OpenShift Virtualization	4.3 Medium	Apr 3, 2024
CVE-2024-1394	Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads	7.5 High	Mar 21, 2024
CVE-2024-21626	runc is a CLI tool for spawning and running containers on Linux according to the OCI specification	8.6 High	Jan 31, 2024
CVE-2023-3089	A compliance problem was found in the Red Hat OpenShift Container Platform	7.0 High	Jul 5, 2023

Other Red Hat products