RHSA-2026:49680: Kiali 2.22.8 for Red Hat OpenShift Service Mesh 3.3
Kiali 2.22.8 for Red Hat OpenShift Service Mesh 3.3
Other sources
Kiali 2.22.8, for Red Hat OpenShift Service Mesh 3.3, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently.Security Fix(es): CVE-2026-59873 openshift-service-mesh/kiali-rhel9: node-tar: Denial of Service via crafted gzip bomb (OSSM-14905) CVE-2026-59873 openshift-service-mesh/kiali-ossmc-rhel9: node-tar: Denial of Service via crafted gzip bomb (OSSM-14908) CVE-2026-59874 openshift-service-mesh/kiali-rhel9: Node-tar: Denial of Service via malformed tar archive header (OSSM-14909) CVE-2026-59874 openshift-service-mesh/kiali-ossmc-rhel9: Node-tar: Denial of Service via malformed tar archive header (OSSM-14912) CVE-2026-59869 openshift-service-mesh/kiali-rhel9: js-yaml: Denial of Service via crafted YAML documents (OSSM-14928) CVE-2026-59869 openshift-service-mesh/kiali-ossmc-rhel9: js-yaml: Denial of Service via crafted YAML documents (OSSM-14930) CVE-2026-49978 openshift-service-mesh/kiali-ossmc-rhel9: DOMPurify: Cross-site scripting vulnerability allows code execution (OSSM-15014) CVE-2026-49978 openshift-service-mesh/kiali-rhel9: DOMPurify: Cross-site scripting vulnerability allows code execution (OSSM-15015) CVE-2026-59877 openshift-service-mesh/kiali-ossmc-rhel9: protobufjs: Denial of Service via crafted .proto schema (OSSM-15027) CVE-2026-59877 openshift-service-mesh/kiali-rhel9: protobufjs: Denial of Service via crafted .proto schema (OSSM-15028) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Kialito a version that resolves this vulnerability.Fixed in 2.22.8Patch OSSM-14905 - Upgrade
Upgrade
Kialito a version that resolves this vulnerability.Fixed in 2.22.8Patch OSSM-14908 - Upgrade
Upgrade
Kialito a version that resolves this vulnerability.Fixed in 2.22.8Patch OSSM-14909 - Upgrade
Upgrade
Kialito a version that resolves this vulnerability.Fixed in 2.22.8Patch OSSM-14912 - Upgrade
Upgrade
Kialito a version that resolves this vulnerability.Fixed in 2.22.8Patch OSSM-14928 - Upgrade
Upgrade
Kialito a version that resolves this vulnerability.Fixed in 2.22.8Patch OSSM-14930 - Upgrade
Upgrade
Kialito a version that resolves this vulnerability.Fixed in 2.22.8Patch OSSM-15014 - Upgrade
Upgrade
Kialito a version that resolves this vulnerability.Fixed in 2.22.8Patch OSSM-15015 - Upgrade
Upgrade
Kialito a version that resolves this vulnerability.Fixed in 2.22.8Patch OSSM-15027 - Upgrade
Upgrade
Kialito a version that resolves this vulnerability.Fixed in 2.22.8Patch OSSM-15028
Event History
Frequently Asked Questions
What is the severity of RHSA-2026:49680?
The severity of RHSA-2026:49680 is high with a score of 7.
What are the security fixes associated with RHSA-2026:49680?
RHSA-2026:49680 includes security fixes for vulnerabilities identified by CVE-2026-….
How do I fix RHSA-2026:49680?
To fix RHSA-2026:49680, update your Kiali installation to version 2.22.8 for Red Hat OpenShift Service Mesh 3.3.
What is Kiali 2.22.8 in the context of RHSA-2026:49680?
Kiali 2.22.8 provides observability for the service mesh in Red Hat OpenShift Service Mesh 3.3.
When was RHSA-2026:49680 published?
RHSA-2026:49680 was published on August 3, 2026.