Important: Red Hat Security Advisory: Kiali 1.73.30 for Red Hat OpenShift Service Mesh 2.6

🗓️ 12 May 2026 18:56:35Reported by RedHatType

redhat🔗 access.redhat.com👁 25 Views

Kiali 1.73.30 for OpenShift Service Mesh 2.6 fixes critical vulnerabilities and migrates yarn.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software	4 Sep 202622:18	–	ibm
IBM Security Bulletins	Security Bulletin: SPSS Collaboration and Deployment Services is affected by vulnerabilities in i18next, follow-redirects, & brace-expansion	25 Jun 202619:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses dompurify-3.3.2.tgz which is vulnerable to CVE-2026-41238, CVE-2026-41239, CVE-2026-41240.	28 Jul 202615:26	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Axios and Netty might affect IBM Storage Defender Copy Data Management	30 Sep 202617:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses dompurify-3.3.2.tgz which is vulnerable to CVE-2026-41238, CVE-2026-41239, CVE-2026-41240	1 Jun 202608:14	–	ibm
IBM Security Bulletins	Security Bulletin:IBM Watson Discovery Cartridge affected by vulnerabilities in axios-1.12.2.tgz	9 Jun 202615:39	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in lodash, cryptography and axios might affect IBM Storage Defender Sentinel Anomaly Scan Engine.	26 Jun 202616:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Observability with Instana (OnPrem)	12 Jun 202606:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in follow-redirects (CVE-2026-40895)	31 May 202616:48	–	ibm
IBM Security Bulletins	Security Bulletin: : Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilities in dependencies	8 Jun 202614:50	–	ibm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2026-32280
access	www.access.redhat.com/security/cve/CVE-2026-40895
access	www.access.redhat.com/security/cve/CVE-2026-41240
access	www.access.redhat.com/security/cve/CVE-2026-42033
access	www.access.redhat.com/security/cve/CVE-2026-42035
access	www.access.redhat.com/security/cve/CVE-2026-42039
access	www.access.redhat.com/security/cve/CVE-2026-42041
access	www.access.redhat.com/security/cve/CVE-2026-42043
access	www.access.redhat.com/security/updates/classification
access	www.access.redhat.com/security/updates/classification/

09 Oct 2026 23:23Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.17.4 - 10

CVSS 46.9

EPSS0.00966

SSVC

kiali 1.73.30 openshift service mesh critical vulnerabilities information disclosure cross site scripting denial of service prototype pollution yarn migration