Known vulnerabilities in Red Hat Container Native Virtualization 4.19

Is your version affected?

CVE	Summary	Score	Published
CVE-2026-13622	A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy	8.8 High	Aug 12, 2026
CVE-2026-17527	In containerized-data-importer (CDI), the aggregated cdi.kubevirt.io:view ClusterRole, intended to provide read-only…	7.7 High	Jul 27, 2026
CVE-2026-13201	A flaw was found in KubeVirt's safepath package used by virt-handler	7.3 High	Jun 24, 2026
CVE-2026-44990	ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer…	9.3 Critical	Jun 12, 2026
CVE-2026-9804	A flaw was found in KubeVirt's virt-exportserver component	7.7 High	May 28, 2026
CVE-2026-7374	A flaw was found in KubeVirt's virt-handler component	9.9 Critical	May 26, 2026
CVE-2026-35469	spdystream is a Go library for multiplexing streams over SPDY connections	8.7 High	Apr 16, 2026
CVE-2026-40175	Axios is a promise based HTTP client for the browser and Node.js	4.8 Medium	Apr 10, 2026
CVE-2026-33186	gRPC-Go is the Go language implementation of gRPC	9.1 Critical	Mar 20, 2026