RHSA-2026:49735: Kiali 2.27.2 for Red Hat OpenShift Service Mesh 3.4

Kiali 2.27.2, for Red Hat OpenShift Service Mesh 3.4, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently.Security Fix(es): CVE-2026-49978 openshift-service-mesh/kiali-ossmc-rhel9: DOMPurify: Cross-site scripting vulnerability allows code execution (OSSM-15013) CVE-2026-49978 openshift-service-mesh/kiali-rhel9: DOMPurify: Cross-site scripting vulnerability allows code execution (OSSM-15016) CVE-2026-59877 openshift-service-mesh/kiali-ossmc-rhel9: protobufjs: Denial of Service via crafted .proto schema (OSSM-15029) CVE-2026-59877 openshift-service-mesh/kiali-rhel9: protobufjs: Denial of Service via crafted .proto schema (OSSM-15030) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

— Red Hat