Threats Tagged 'cve-2026-42264'

Kiali 2.4.20 for Red Hat OpenShift Service Mesh 3.0 addresses a security vulnerability identified as CVE-2026-42264. This vulnerability involves prototype pollution in the Axios library, which can lead to information disclosure and request manipulation. Red Hat has rated the security impact as Important and released this version to mitigate the issue. No explicit patch version range is provided, but the advisory indicates Kiali 2.4.20 contains the fix. No known exploits are reported in the wild at this time.

Kiali 2.22.6 for Red Hat OpenShift Service Mesh 3.3 addresses multiple security vulnerabilities including cross-site scripting, privilege escalation, information disclosure, denial of service, man-in-the-middle attacks, and prototype pollution. These issues affect various components such as ip-address handling, Axios HTTP client, WebSocket processing, form-data handling, and JavaScript cookie management. The vulnerabilities could lead to impacts like XSS attacks, privilege escalation, information leaks, denial of service, and client-side attacks. Red Hat has released this update to mitigate these issues with a security impact rated as Moderate by Red Hat Product Security.