{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "Red Hat OpenShift Virtualization 4: all CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/red-hat--red-hat-openshift-virtualization-4/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/red-hat--red-hat-openshift-virtualization-4/all.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-92982/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-92982/",
   "title": "CVE-2026-92982 · Red Hat Ansible Automation Platform 2.6 · disclosed",
   "content_text": "A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection vulnerability by crafting malicious custom resource (CR) specification values. These values are processed by Ansible without proper sanitization, allowing embedded Jinja2 expressions to be executed within the operator pod. This can lead to arbitrary code execution and privilege escalation, granting the attacker control over the operator's service account with cluster-wide permissions.",
   "date_published": "2026-10-15T15:36:57Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-102623/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-102623/",
   "title": "CVE-2026-102623 · Red Hat OpenShift Virtualization 4 · disclosed",
   "content_text": "A flaw was found in KubeVirt. An authenticated user with permission to create Virtual Machine Instances (VMIs) can cause a Denial of Service (DoS) by submitting a virtual machine definition with an empty ephemeral volume. The virt-controller component fails to properly validate the volume configuration, leading to an unhandled exception and application crash during processing. Because the malformed definition persists in the cluster, the controller enters a continuous crash loop, disrupting virtual machine lifecycle operations across the entire environment.",
   "date_published": "2026-09-29T17:06:07Z"
  }
 ]
}