Red Hat OpenShift Virtualization 4/openshift-virtualization/kubevirt-console-plugin-rhel9
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| DOMPurify: IN_PLACE hook removal leaves a detached subtree executable, causing XSS | dompurifyAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-ui-rhel9 | npmRed Hat | Medium | Fix reported | |
| Axios HTTP/2 Session Cleanup State Corruption Vulnerability | axiosCryostat 4/axios | npmRed Hat | Medium | Fix reported | |
| Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF | axiosGatekeeper 3/redhat-user-workloads/gatekeeper-3-18 | npmRed Hat | Medium | Fix reported | |
| showdown: showdown: Cross-site scripting via unescaped double quotes in link and image attributes | Cryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9Multicluster Engine for Kubernetes/multicluster-engine/console-mce-rhel9 | Red Hat | Medium | No fix reported |