Vulnerabilities of Red Hat Red Hat OpenShift Virtualization 4

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-114406	Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns	6.8 Medium	Oct 21, 2026
CVE-2026-92982	A flaw was found in Ansible Operator Plugins	8.5 High	Oct 15, 2026
CVE-2026-102623	A flaw was found in KubeVirt	6.5 Medium	Sep 29, 2026
CVE-2026-79699	A flaw was found in the containers/storage library	4.4 Medium	Sep 15, 2026
CVE-2026-79705	Podman: buildah: buildah/copier: directory escape via crafted tar symlinks when used outside buildah by non-root callers	4.5 Medium	Sep 15, 2026
CVE-2026-19730	Podman: podman: quadlet install --replace non-truncating write retains removed host-access directives	4.2 Medium	Aug 13, 2026
CVE-2026-13622	A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy	8.8 High	Aug 12, 2026
CVE-2026-17527	In containerized-data-importer (CDI), the aggregated cdi.kubevirt.io:view ClusterRole, intended to provide read-only…	7.7 High	Jul 27, 2026
CVE-2026-13676	fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTTP-family URLs	7.5 High	Jun 29, 2026
CVE-2026-13434	A flaw was found in KubeVirt's network annotation generator	4.9 Medium	Jun 26, 2026
CVE-2026-13325	A flaw was found in KubeVirt's migration proxy	8.5 High	Jun 26, 2026
CVE-2026-13322	A flaw was found in KubeVirt's downward metrics virtio-serial server	3.8 Low	Jun 26, 2026
CVE-2026-13318	A server-side request forgery (SSRF) flaw was found in KubeVirt's virt-api port-forward handler	6.4 Medium	Jun 25, 2026
CVE-2026-13218	A flaw was found in KubeVirt's virt-handler network cache handling	4.2 Medium	Jun 25, 2026
CVE-2026-13201	A flaw was found in KubeVirt's safepath package used by virt-handler	7.3 High	Jun 24, 2026
CVE-2026-13208	A flaw was found in KubeVirt's virt-handler domain notify server	6.5 Medium	Jun 24, 2026
CVE-2026-48779	ws is an open source WebSocket client and server for Node.js	7.5 High	Jun 16, 2026
CVE-2026-44990	ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer…	9.3 Critical	Jun 12, 2026
CVE-2026-12143	form-data is a library for creating readable multipart/form-data streams	8.7 High	Jun 12, 2026
CVE-2026-44486	Axios is a promise based HTTP client for the browser and Node.js	7.5 High	Jun 11, 2026
CVE-2026-44487	Axios is a promise based HTTP client for the browser and Node.js	8.2 High	Jun 11, 2026
CVE-2026-44488	Axios is a promise based HTTP client for the browser and Node.js	7.5 High	Jun 11, 2026
CVE-2026-44496	Axios is a promise based HTTP client for the browser and Node.js	7.5 High	Jun 11, 2026
CVE-2026-44495	Axios is a promise based HTTP client for the browser and Node.js	7.0 High	Jun 11, 2026
CVE-2026-44494	Axios is a promise based HTTP client for the browser and Node.js	8.7 High	Jun 11, 2026

Other Red Hat products