Important: Red Hat Security Advisory: Kiali 2.22.8 for Red Hat OpenShift Service Mesh 3.3

🗓️ 03 Aug 2026 13:31:22Reported by RedHatType

redhat🔗 access.redhat.com👁 10 Views

Kiali 2.22.8 for OpenShift Service Mesh 3.3 fixes DoS and cross site scripting.

Reporter	Title	Published	Views	Family All 490
IBM Security Bulletins	Security Bulletin: Vulnerabilities found in Watson Data Intelligence	24 Aug 202605:21	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in js-yaml affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	25 Aug 202618:06	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	3 Aug 202611:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Aspera Faspex	20 Jul 202615:47	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to multiple vulnerabilitie	24 Jul 202615:43	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in DOMPurify affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	25 Aug 202618:28	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in tar affects IBM Netezza Appliance	11 Aug 202606:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar Log Management AQL Plugin is vulnerable to using components with known vulnerabilities	10 Aug 202614:18	–	ibm
IBM Security Bulletins	Security Bulletin: Cyber Fraud includes components with multiple known vulnerabilities	6 Aug 202613:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses js-yaml which is vulnerable to CVE-2025-64718, CVE-2026-53550, CVE-2026-59869	10 Aug 202611:55	–	ibm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2026-49978
access	www.access.redhat.com/security/cve/CVE-2026-59869
access	www.access.redhat.com/security/cve/CVE-2026-59873
access	www.access.redhat.com/security/cve/CVE-2026-59874
access	www.access.redhat.com/security/cve/CVE-2026-59877
access	www.access.redhat.com/security/updates/classification
access	www.access.redhat.com/security/updates/classification/

26 Aug 2026 04:27Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.17.5

CVSS 49.2

EPSS0.00556

SSVC

kiali 2.22.8 open shift service mesh denial of service cross site scripting yaml vulnerability tar header issue gzip bomb protobufjs vulnerability dompurify vulnerability js yaml vulnerability